{"uuid": "e6b57279-fc6e-467b-994b-7cb049646cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-37032", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ollama_rce_cve_2024_37032.rb", "content": "{\"aliases\": [], \"arch\": \"x64\", \"author\": [\"Sagi Tzadik \", \"Valentin Lobstein \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Ollama before 0.1.34 is vulnerable to a path traversal attack via the\\n          model pull mechanism (CVE-2024-37032). When pulling a model, the digest\\n          field in OCI manifests is not validated, allowing an attacker to inject\\n          path traversal sequences to write arbitrary files on the server.\\n\\n          This module starts a rogue OCI registry that serves two models. The first\\n          pull writes a malicious shared library and /etc/ld.so.preload via path\\n          traversal (a sacrificial first layer absorbs the digest verification\\n          failure so the remaining files persist). The second pull registers a valid\\n          model so /api/chat can spawn the llama.cpp runner process, which triggers\\n          the dynamic linker to load the malicious library via ld.so.preload. The\\n          library constructor forks, cleans up ld.so.preload, and executes the\\n          payload in the child process.\\n\\n          The default Ollama Docker image runs as root with the API bound to\\n          0.0.0.0:11434, making this a direct unauthenticated RCE.\", \"disclosure_date\": \"2024-05-05\", \"fullname\": \"exploit/linux/http/ollama_rce_cve_2024_37032\", \"is_install_path\": true, \"mod_time\": \"2026-03-11 21:31:08 +0000\", \"name\": \"Ollama Model Registry Path Traversal RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/ollama_rce_cve_2024_37032.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/ollama_rce_cve_2024_37032\", \"references\": [\"CVE-2024-37032\", \"URL-https://www.wiz.io/blog/probllama-ollama-vulnerability-cve-2024-37032\", \"GHSA-v4cg-63r8-8fh8\"], \"rport\": 11434, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:48.848916Z"}