Sometime in early 2025, a security researcher flagged a configuration file that could do something it was never supposed to: silently siphon API keys, cloud credentials, and signing certificates out ...
GGUF parser vulnerabilities disclosed May 15, 2026 include a critical integer overflow that lets any malicious model file trigger arbitrary memory reads — affecting Ollama, LM Studio, and every local ...