This vulnerability exists in the digestToPath function within the x/imagegen/transfer/transfer.go file of Ollama up to version 0.20.2. By manipulating the digest argument, an attacker can perform a path traversal attack, potentially accessing or modifying files outside the intended directory scope. The attack can be launched remotely without privileges or user interaction, but it requires high complexity to exploit. The CVSS 4.0 vector indicates network attack vector, high attack complexity, no privileges required, no user interaction, and low impact on confidentiality with no impact on integrity or availability.

Successful exploitation could allow an attacker to traverse the file system paths on the affected system, potentially accessing sensitive files or data outside the intended directories. However, the impact on confidentiality is rated low, and there is no impact on integrity or availability according to the CVSS vector. The exploitability is difficult, and no known active exploitation in the wild has been reported. The availability of public exploit code increases the risk of attempted attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official patch is available, users should monitor for updates from the vendor. Until a fix is released, consider restricting access to the affected component and applying network-level controls to limit exposure. Avoid passing untrusted input to the digest argument if possible.