CVE-2025-51471

MEDIUM

Ollama 0.6.7 - Cross-Domain Token Exposure via WWW-Authenticate Header Realm

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2025-51471. PoCs published by adminlove520, ajtazer.

AI-analyzed exploit summary The repository contains functional exploit code for multiple CVEs, including authentication bypass vulnerabilities in TOTOLINK devices and a scanner for Fortinet SSL VPN (CVE-2024-21762). The PoCs demonstrate the vulnerabilities with clear technical details and executable scripts.

Description

Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint.

Exploits (2)

github WORKING POC 2 stars
by adminlove520 · pythonpoc
https://github.com/adminlove520/CVE-Poc_All_in_One/tree/main/2025/CVE-2025-51471

The repository contains functional exploit code for multiple CVEs, including authentication bypass vulnerabilities in TOTOLINK devices and a scanner for Fortinet SSL VPN (CVE-2024-21762). The PoCs demonstrate the vulnerabilities with clear technical details and executable scripts.

Classification
Working Poc 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: TOTOLINK LR350, TOTOLINK T6, Fortinet SSL VPN
No auth needed
Prerequisites: network access to target device
devstral-2 · analyzed Feb 27, 2026 Full analysis →
nomisec WORKING POC 2 stars
by ajtazer · poc
https://github.com/ajtazer/CVE-2025-51471-POC

This repository contains a functional Proof of Concept (PoC) for CVE-2025-51471, demonstrating a Cross-Domain Authentication Token Exposure vulnerability in Ollama. The exploit involves setting up a malicious registry server that tricks Ollama into sending its authentication token to an attacker-controlled endpoint via a crafted `WWW-Authenticate` header.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Ollama (all versions)
No auth needed
Prerequisites: Python 3.7+ · Flask · Ollama running on the target system
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (4)

Core 4

Scores

CVSS v3 6.9
EPSS 0.0006
EPSS Percentile 18.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-345 CWE-384
Status published
Products (2)
ollama/ollama 0.6.7
ollama/ollama 0 - 0.9.6Go
Published Jul 22, 2025
Tracked Since Feb 18, 2026