2 CVEs published in the last four months and 2 stories. Exploited flaws first.
| CVE | CVSS | Severity | Product | Summary | Published |
|---|---|---|---|---|---|
| CVE-2026-5757 | 7.5 | high | ollama | Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacke | 107d ago |
| CVE-2026-15685 | 7.5 | high | ollama | Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. | 90d ago |
A recent report indicates a significant vulnerability within NVIDIA NemoClaw that could enable a malicious webpage to compromise a local AI agent. The core of the issue lies in the ability of an attacker to modify the AI model's chat template, effectively injecting hidden instructions that would then influence all subsequent interactions with the model. This form of "poisoning" could lead to…
A recent report detailed an experiment using the Gemma4 large language model (LLM) with Ollama to analyze file hashes, specifically focusing on malware hashes collected by a DShield sensor. The objective was to assess the utility and quality of recommendations generated by the AI in understanding and responding to observed malicious activity. The testing period covered malware hashes uploaded…