MEDIUMVulnerability
CVE-2026-86289
A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Performing a manipulation results in integer overflow. The attack is possible to be carried out remotely. The exploit has been made public and could be used. Upgrading to version 0.31.2-rc1 is capable of addressing this issue. The patch is named 67b6a1c2d45321e0cb3c04a18073f9818de7724b. It is recommended to upgrade the affected component.
Properties
- severity
- MEDIUM
- score
- 4.3
- cve_id
- CVE-2026-86289
- signal_observed_at
- 2026-09-16T21:37:07+00:00
- vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
- published_at
- 2026-09-07T09:17:17.470
- last_modified
- 2026-09-11T21:17:43.407
Related Entities (3)
DESCRIBED_BY (1)
→[Source]NVD
HAS_WEAKNESS (2)
→[Weakness]
→[Weakness]Integer Overflow or Wraparound
Explore deeper with Ninja Signal's threat intelligence graph