CVE-2026-102697

Name of the Vulnerable Software and Affected Versions Ollama versions 0.14.0 through 0.31.1

Description An incorrect authorization issue exists in the experimental agent mode Bash tool approval mechanism due to improper parsing of shell syntax. Attackers capable of influencing model output via prompt injection can bypass session approval requirements to execute unauthorized shell commands. This is achieved by appending control operators, such as semicolons or logical operators, to commands that have been approved.

Recommendations Update Ollama to version 0.31.2 or later.