{"vulnerability": "cve-2026-103663", "sightings": [{"uuid": "2318a048-5efe-46fb-a4e9-78c44ccf5849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103663", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxesrrqaop2o", "content": "CVE-2026-103663 - ollama\nThe Ollama service can be tricked into writing a malicious program to system folders because it does not check the file path it receives. If the program can write to the Ollama installation\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ollama #CVE #infosec", "creation_timestamp": "2026-10-08T15:50:08.840589Z"}, {"uuid": "7ddc7816-35e1-4510-b751-08013b271483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103663", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxetqumsho2l", "content": "\ud83d\udea8 CVE-2026-103663 \u2014 CVSS 9.4 CRITICAL\n\nOllama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-103663\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-08T16:07:29.371894Z"}]}