A vulnerability, which was classified as problematic, has been found in Ollama up to 0.17.5 on Windows. This affects an unknown function of the component Update Handler. The manipulation leads to download of code without integrity check.
This vulnerability is uniquely identified as CVE-2026-42249. The attack is possible to be carried out remotely. No exploit exists.
