Collected research

CVE-2025-51471: Ollama authentication token theft via unvalidated WWW-Authenticate realm

Mohammed Benhelli and Patrick Ventuzelo

Advisory for CVE-2025-51471 describing credential theft from Ollama through an unvalidated WWW-Authenticate realm. A malicious endpoint can redirect the client's authentication flow so that a registry token is disclosed to an attacker-controlled server.

Record

Researcher

Mohammed Benhelli and Patrick Ventuzelo

In the archive

• Collected in the 2025 research round

Related sources

• Proof of concept

Tags

• credential-theft
• auth-bypass
• redirect
• ai
• cve
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Mohammed Benhelli and Patrick Ventuzelo, first published at the original source. Preserved copies are kept so the citation survives its host.