{
  "schema_version": "1.6.0",
  "id": "ACVE-2024-0001",
  "aliases": [
    "CVE-2024-37032"
  ],
  "published": "2026-09-19T00:00:00Z",
  "modified": "2026-09-20T02:45:17.577Z",
  "summary": "Ollama can traverse paths and reach code execution",
  "details": "## What the vulnerability is\n\nOllama before 0.1.34 can mishandle a model digest while pulling model data. The path traversal can write files outside the intended model location and, in the documented attack chain, reach code execution. The affected component is the Ollama service, not the model itself.\n\n## Which configuration is exposed\n\nThe exposed harness is Ollama with `harness.id` equal to `ollama` and a version below `0.1.34`. The matcher intentionally encodes only that version condition. Exposure is more serious when `OLLAMA_HOST` binds the API off loopback, because a remote client can reach the service; a loopback-only binding limits that network path. The matcher does not read `OLLAMA_HOST`, so ACVE cannot distinguish those deployment choices and reports the vulnerable version broadly.\n\n## How ACVE detects it\n\nACVE reads `harness.id` and `harness.version` from the lockfile and evaluates `<0.1.34`. It does not read the daemon's bind address, registry trust, model digest, container privilege, or whether a pull has occurred. A match therefore means that the vulnerable Ollama component is present; it is not proof that a reachable attacker has supplied a malicious model manifest.\n\n## Fix\n\n1. Upgrade the Ollama harness to `0.1.34` or later.\n2. Set `OLLAMA_HOST` to a loopback address unless remote access is required, and protect any intentionally remote endpoint with an appropriate network boundary.\n\nThe bind-address change reduces reachability during remediation, but only the upgrade removes the vulnerable path-handling implementation.\n\nThe bind-address change reduces reachability during remediation, but only the upgrade removes the vulnerable path-handling implementation.\n\n## References\n\nSee `references` for primary sources.",
  "affected": [
    {
      "package": {
        "ecosystem": "AgentHarness",
        "name": "ollama"
      },
      "ranges": [
        {
          "type": "SEMVER",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.1.34"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37032"
    },
    {
      "type": "REPORT",
      "url": "https://example.com/research/acve"
    },
    {
      "type": "FIX",
      "url": "https://github.com/pickbitsai/acve/issues?q=CVE-2024-37032"
    }
  ],
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "8"
    }
  ],
  "database_specific": {
    "severity": "HIGH",
    "acve": {
      "specVersion": 1,
      "status": "published",
      "vulnClasses": [
        "path-traversal"
      ],
      "cwe": [
        "CWE-22"
      ],
      "taxonomy": {
        "owasp_asi": [
          "ASI02 Tool Misuse"
        ],
        "atlas": [
          "AML.T0051"
        ]
      },
      "matcher": {
        "all": [
          {
            "field": "harness.id",
            "op": "eq",
            "value": "ollama"
          },
          {
            "field": "harness.version",
            "op": "semverRange",
            "value": "<0.1.34"
          }
        ]
      },
      "fix": {
        "summary": "Upgrade Ollama and bind its API to loopback unless remote access is required.",
        "actions": [
          {
            "type": "upgrade",
            "target": "harness:ollama",
            "to": "0.1.34",
            "why": "Use the fixed release."
          },
          {
            "type": "reconfigure",
            "target": "settings:ollama:OLLAMA_HOST",
            "to": "loopback",
            "why": "Reduce reachability of the vulnerable API while upgrading."
          }
        ]
      },
      "exposure": "network",
      "exploitation": {
        "vector": "malicious project or server configuration",
        "userInteraction": "required",
        "kev": false
      },
      "grounding": {
        "osv": {
          "checkedAt": "2026-09-20T02:43:19Z",
          "found": true,
          "aliasesConfirmed": [
            "CVE-2024-37032",
            "GHSA-8hqg-whrw-pv92",
            "GO-2024-2901"
          ],
          "packagesConfirmed": [],
          "fixedVersionsConfirmed": [],
          "cvss": [
            {
              "type": "CVSS_V3",
              "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
            }
          ]
        },
        "nvd": {
          "checkedAt": "2026-09-20T02:43:19Z",
          "found": true,
          "cvss": 8.8,
          "published": "2024-05-31T04:15:09.617"
        },
        "kev": {
          "checkedAt": "2026-09-20T02:43:19Z",
          "listed": false
        },
        "registry": {
          "checkedAt": "2026-09-20T02:43:19Z",
          "confirmed": [],
          "missing": []
        }
      },
      "validatedBy": [
        {
          "who": "Mark Pickering (PickBits) via Claude Code session 01YR6ri2tM3jU9vdQNe9R5pw",
          "date": "2026-09-20",
          "method": "vendor-advisory",
          "evidence": "https://nvd.nist.gov/vuln/detail/CVE-2024-37032",
          "note": "Ollama < 0.1.34 path traversal (Probllama); NVD CVSS 8.8 confirmed by grounding."
        }
      ]
    }
  }
}