Ollama Windows Auto-Updater Persistent RCE | MSSP Advisory

Two vulnerabilities in Ollama's Windows auto-updater allow attackers to plant persistent executables that run at every system login. Ollama is an open-source tool for running large language models locally, commonly deployed by organizations wanting to keep AI workloads on-premises without API dependencies.

Your clients running local AI models through Ollama now face persistent backdoor installation every time they log in, creating long-term access for attackers. If your RMM agents run on these same systems, compromised Ollama installations could provide attackers with pathways into your management infrastructure.