Tag archive

Cve 2026 103663

Coverage tagged cve 2026 103663.

Cve 2026 103663 AI Security

Ollama Path Traversal Lets Remote Attackers Plant Files, and Reach Root in Docker Deployments (CVE-2026-103663)

Ollama's unauthenticated /api/pull path traversal (CVE-2026-103663) can plant a binary that runs as root on restart in Docker. Fixed in 0.35.0.

Related desks

AI Security

Latest

Oct 8, 2026, 10:51 PM EDT · AI Security · Pwn2own Ireland 20267 minPwn2Own Ireland 2026 Breaks LiteLLM, Codex, Dynamo, Chroma and Oracle's AI Database: What Is Known and What to Harden

Five AI targets fell at Pwn2Own Ireland 2026. No CVEs or bug details are public yet, so here is what ZDI confirmed and what to harden now.

Oct 8, 2026, 10:29 PM EDT · Research · Anthropic Pricing7 minClaude Sonnet 5.5 cache reads drop to $0.10 per MTok: when prompt caching pays

Sonnet 5.5 cache reads fell from $0.20 to $0.10 per MTok on Oct 7. Break-even stays at 2 requests (5-min cache) or 3 (1-hour); each hit costs half as much.

Oct 8, 2026, 9:39 PM EDT · AI Security · Cve 2026 1036635 minOllama Path Traversal Lets Remote Attackers Plant Files, and Reach Root in Docker Deployments (CVE-2026-103663)

Ollama's unauthenticated /api/pull path traversal (CVE-2026-103663) can plant a binary that runs as root on restart in Docker. Fixed in 0.35.0.

Oct 7, 2026, 10:53 PM EDT · Research · Anthropic6 minClaude Max and Team Plans Now Include Monthly API Credits, but Claude Code Is Not Covered

Claude Max and Team now include monthly API credits: $100 on Max 5x, $200 on Max 20x, up to $500 for Team. Claude Code is excluded and credits expire monthly.