security_identifier

CVE-2024-28224

Earlier Ollama issue cited by a Black Duck commentator as when this class of browser-to-local-service exposure was hardened.

Current clusters

security1 distinct publisher

NemoClaw's wide Ollama bind lets a webpage rewrite your model's chat template

Oasis Security says a malicious page can reach the unauthenticated API on port 11434 and poison every later conversation. NVIDIA's own source puts that bind on one platform path.

Publishers:thehackernews.com

Reality

Evidence58
Adoption: Insufficient
Hype gap+22
Incentives62

product1 distinct publisher

Nvidia's agent sandbox holds; the model server underneath it answers to any browser tab

Oasis Security says CVE-2026-65105 lets one malicious page reach the Ollama instance behind a NemoClaw agent and rewrite the template every prompt passes through.

Publishers:siliconangle.com

Reality

Evidence52
Adoption: Insufficient