Skip to content
Submit incident
AII-1001-02841
Well documentedThree or more independent publishers report the core facts.

175,000 Ollama AI servers exposed to unauthorized access globally

Approximately 175,000 Ollama servers were discovered publicly accessible on the internet without authentication, creating risks for code execution, unauthorized access, and malicious activities including spam and malware generation. The exposure stemmed from user misconfiguration and can be remedied by binding servers to localhost only.

29 January 2026 Β· Ollama Β· Security and cyberattacks
29 January 2026
AII-1001-028415 sources ↓
Quick facts
Organization
Ollama (subject)
Category
Security and cyberattacks
Source
Cyber Security News
Date
29 January 2026
Drafted by
Raidu Incident Detection

What happened

Approximately 175,000 Ollama servers were discovered to be publicly accessible across the internet without authentication.

Some of these instances were already being exploited via LLMjacking to generate spam and malware content.

The issue stemmed from user misconfiguration and is fixable by binding servers to localhost only.

Reported impact

The exposure created serious risk for widespread code execution and unauthorized access to external systems.

Classification

Organization
Ollama (subject)
Category
Security and cyberattacks
Industry
IT infrastructure and hosting
Harm status
Actual harm
Intent
Unintentional
Timing
Post-deployment
Harm types
Public interest
Harmed
General public, Business
Failure modes
Unsafe autonomous behaviour
AI systems
Ollama

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

Cyber Security News
175,000 Exposed Ollama Hosts Enable Code Execution and External System Access
30 January 2026
IT Security News - cybersecurity, infosecurity news
- IT Security News
30 January 2026
SC Media
Report: Internet-exposed Ollama AI servers widespread
30 January 2026
TechRadar
Over 175,000 publicly exposed Ollama AI servers discovered worldwide - so fix now
30 January 2026
WebProNews
The Silent Crisis: How 175,000 Unsecured AI Servers Became a Global Security Liability
31 January 2026