CVE-2026-7020 is a path traversal vulnerability affecting Ollama versions 0.20.0 through 0.20.2. The issue resides in the digestToPath function in the x/imagegen/transfer/transfer.go file, part of the Tensor Model Transfer Handler. By manipulating the digest argument, an attacker can perform a path traversal attack remotely. The vulnerability has a CVSS 4.0 score of 6.3 with network attack vector, high attack complexity, no privileges required, and no user interaction needed. The vendor was contacted but did not provide a response or patch. The exploit has been publicly disclosed, but no active exploitation has been confirmed.

Successful exploitation could allow an attacker to perform path traversal attacks remotely, potentially accessing or manipulating files outside the intended directory scope. The attack complexity is high and exploitability is difficult. There are no confirmed reports of active exploitation in the wild. The medium severity score reflects a moderate risk given the difficulty of exploitation and lack of privilege or user interaction requirements.

Patch status is not yet confirmed — no official fix or remediation guidance has been provided by the vendor. Since the vendor did not respond to early disclosure and no patch links are available, users should monitor the vendor's channels for updates. Until a patch is released, consider restricting network access to the affected component and applying any available application-level controls to validate or sanitize input to the digestToPath function to mitigate path traversal risks.