Tagged "security-vulnerability"
14 articles tagged security-vulnerability, 13 February 2026 to 11 August 2026. Newest first.
-
DEF CON 34 Exposes 10 Critical Vulnerabilities in Local AI Systems
Security researchers at DEF CON 34 identified 10 significant vulnerabilities affecting local AI deployments, highlighting critical gaps in model serving frameworks, quantization libraries, and inference runtime security. The findings emphasize the need for hardening local LLM infrastructure before production deployment.
-
Critical GPU Memory Leak Vulnerability Discovered in vLLM
A severe security vulnerability (CVE-2026-53923) in vLLM allows attackers to leak GPU memory through a 32-bit integer overflow, potentially exposing sensitive data from neighboring processes during local inference.
-
llama.cpp GGUF Parser Flaws: Critical Integer Overflow Enables Arbitrary Reads in Every Local AI Stack
A critical security vulnerability discovered in llama.cpp's GGUF parser threatens the integrity of local LLM deployments. The flaw allows attackers to read arbitrary memory through malicious model files.
-
Critical Out-of-Bounds Read Vulnerability Discovered in Ollama
A significant security vulnerability (CVE-2026-7482) has been identified in Ollama, affecting local LLM deployments. Users running self-hosted Ollama instances should prioritize updating to patched versions.
-
Ollama Vulnerability Exposes Remote Process Memory
A security vulnerability in Ollama has been disclosed that can expose remote process memory, highlighting important security considerations for users deploying Ollama locally or in networked environments.
-
Critical Ollama Memory Leak Vulnerability Exposes 300,000 Servers Globally
A critical memory leak vulnerability has been discovered in Ollama, affecting approximately 300,000 servers worldwide. This security flaw poses significant risks to self-hosted and edge LLM deployments that rely on Ollama.
-
Critical Ollama Memory Leak Vulnerability Exposes 300,000 Servers Globally
A severe memory leak vulnerability has been discovered in Ollama, affecting approximately 300,000 servers worldwide. This security issue highlights the importance of keeping local LLM deployment frameworks updated and properly configured.
-
Critical Ollama Memory Leak Vulnerability Exposes 300,000 Servers Globally
A severe memory leak vulnerability in Ollama has exposed approximately 300,000 servers to potential attacks. This critical security issue affects one of the most popular local LLM deployment platforms and requires immediate attention from operators running Ollama instances.
-
Critical Security Vulnerabilities in Ollama Auto-Updater Enable Remote Code Execution
Researchers discovered unpatched flaws in Ollama's auto-updater that could allow persistent remote code execution on local deployments. This affects a significant portion of self-hosted Ollama instances and highlights the importance of security practices in local LLM infrastructure.
-
Critical Security Flaw: Hackers Can Exploit Ollama Model Uploads to Leak Sensitive Server Data
A newly discovered vulnerability in Ollama allows attackers to exploit model uploads to extract sensitive information from local servers. This security issue highlights the importance of proper isolation and authentication when deploying LLMs locally.
-
Hackers Exploit Ollama Model Uploads to Leak Server Data
Security vulnerability discovered in Ollama's model upload functionality allowing attackers to extract sensitive server data, highlighting critical security considerations for self-hosted LLM deployments.
-
Malicious GGUF Models Could Trigger Remote Code Execution on SGLang Servers
Security researchers have identified a critical vulnerability where specially crafted GGUF model files can achieve remote code execution on SGLang inference servers, posing significant risks to organizations running local LLM deployments.
-
If Your AI Agent Ran NPM Install During the Axios Attack, You're Compromised
A critical security warning for AI agents and autonomous systems that execute code or package management commands. The article highlights how AI agents autonomously running npm install during known supply chain attacks can compromise entire deployments, raising important security considerations for self-hosted and edge LLM applications.
-
175,000 Publicly Exposed Ollama AI Servers Discovered Across 130 Countries
Security researchers found over 175,000 Ollama installations with no authentication exposed to the internet, creating significant security risks for local LLM deployments worldwide.