Ollama Arbitrary File Deletion Vulnerability

A vulnerability allowing arbitrary file deletion has been identified in Ollama versions through 0.1.33. The issue arises when a file already exists at the path where a 'digest' is to be saved. In such cases, Ollama mistakenly interprets the file as having a mismatched 'digest' value, leading to its deletion. This flaw can be exploited by sending a crafted request to the '/api/pull' endpoint, either through the Ollama command line interface or via direct API calls.

Impact

Exploitation of this vulnerability results in the unintended deletion of files on the server where Ollama is running.

Reproduction

To reproduce this vulnerability, first upload a file to the Ollama server. Then, send a request to the '/api/pull' endpoint, specifying a 'digest' that points to the uploaded file. Ollama will attempt to save the 'digest', but upon detecting the existing file, it will delete it instead.

Remediation

Users are advised to upgrade Ollama to version 0.1.34 or later.