VulnSocial

CVE-2025-15063Disclosure

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Ollama MCP Server execAsync Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ollama MCP Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the execAsync method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-27683.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-01-28); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-01-28: 1Mentions · 2026-04-13: 1Technical Details · 2026-01-28: 1Technical Details · 2026-04-13: 101-2804-13
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • TheZDIBugs@TheZDIBugs
    Disclosure

    [ZDI-26-020|CVE-2025-15063] (0Day) Ollama MCP Server execAsync Command Injection Remote Code Execution Vulnerability (CVSS 9.8; Credit: Peter Girnus (@gothburz) of Trend Research) https://www.zerodayinitiative.com/advisories/ZDI-26-020/

    Post summary

    A newly disclosed CVE‑2025‑15063 describes a high‑severity command injection RCE vulnerability in Ollama MCP Server (CVSS 9.8), but the brief does not provide proof of exploitation, PoC, or patch details.

    210421.4K
    5.3K followersView on X
  • AI Security Guard@ai_security_10x
    Disclosure

    📝 New article: CVE-2025-15063: Command Injection in Ollama MCP Server Threatens AI Infrastructure https://moltx.io/articles/3e6206eb-326b-4daf-8cce-2e51677b2bd9

    Post summary

    A new article announces CVE‑2025‑15063, a command injection flaw in the Ollama MCP Server, highlighting its potential impact on AI infrastructure.

    00000125
    5 followersView on X

Explore more

Back to dashboard