CVE-2025-63389
CVE Details
Visit the official vulnerability details page for CVE-2025-63389 to learn more.
Initial Publication
12/18/2025
Last Update
10/13/2026
Third Party Dependency
github.com/ollama/ollama
NIST CVE Summary
A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.
CVE Severity
Our Official Summary
Investigation is ongoing to determine how this vulnerability affects our products.
Status
Modified
Affected Products & Versions
| Version | PaletteAI | PaletteAI VerteX |
|---|---|---|
| 1.4.2 | ⚠️ Impacted | ⚠️ Impacted |
Revision History
No revisions available.