Ollama security issue includes CVE-2026-7482

Heap out-of-bounds in Ollama GGUF loader (CVE-2026-7482) allows unauthenticated remote reads of heap memory, exposing prompts, env vars and secrets across ~300k deployments. CVEs: CVE-2026-7482.

Part of the PlainSec briefing for 2026-05-06

Sources

• SecurityWeek
• CSO Online
• The Hacker News