Ollama versions up to 0.20.2 contain a path traversal vulnerability in the digestToPath function of the Tensor Model Transfer Handler component. This flaw allows remote attackers to manipulate the digest argument to perform path traversal. Exploitation is considered difficult and requires high complexity. Public exploit code is available, but no vendor response or patch has been provided.