Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak

A critical out-of-bounds read vulnerability, tracked as CVE-2026-7482 with a CVSS score of 9.1, has been discovered in Ollama, potentially affecting over 300,000 servers worldwide¹. This flaw, codenamed "Bleeding Llama" by Cyera, enables remote, unauthenticated attackers to leak the entire process memory of the affected system. The vulnerability's high severity score indicates a significant risk of exploitation, which could lead to substantial data breaches. Given its potential impact, organizations should assess their exposure to this vulnerability and prioritize mitigation based on evidence of exploitation. The disclosure of CVE-2026-7482 expands the active attack surface, making it essential for practitioners to take proactive measures to protect their systems. This vulnerability matters to security professionals because it highlights the need for prompt patching and monitoring to prevent potential attacks that could compromise sensitive data.