Case talos-exposed-ollama-serversModel & data leakWorldwide
Cisco Talos finds over 1,100 Ollama LLM servers open to the internet without authentication
A Shodan sweep by Cisco Talos located more than 1,100 publicly reachable Ollama servers within minutes; about 20 percent were actively serving models open to extraction, jailbreak and resource abuse.
MediumAttack on AIStatus: OngoingVerified case file
Open in the interactive mapCite this case
- Reported
- Sep 2, 2025
- Location
- Worldwide
- Target
- Self-hosted Ollama deployments
- Severity
- Medium
- Triggered by
- Cisco Talos researchers (discovery); operators' misconfiguration
- Actor type
- Security researchers
- Reported loss
- None reported
- CVE
- None
What happened
A Shodan sweep by Cisco Talos located more than 1,100 publicly reachable Ollama servers within minutes; about 20 percent were actively serving models open to extraction, jailbreak and resource abuse.
Impact: Over 1,100 exposed servers, roughly 20 percent hosting models exposed to extraction, backdoor injection and unauthorized use; the rest open to model uploads or configuration tampering
Who triggered it
Actor: Cisco Talos researchers (discovery); operators' misconfiguration
Attribution: Research scan by Cisco Talos; exposures stem from default Ollama configurations without authentication
Motive: Security research measuring exposed AI infrastructure
How it happened
Attack vector: Unauthenticated Ollama API endpoints discoverable via Shodan
Root cause: Ollama ships without built-in authentication and operators bind it to public interfaces
Timeline
- Talos finds over 1,000 exposed servers within 10 minutes of starting its scan
- Findings published: 36.6 percent of servers in the US, 22.5 percent in China, 8.9 percent in Germany
Response
Talos recommended authentication, network restrictions and monitoring; later scans reported far larger exposure counts
Current status: Ongoing
Sources (open in a new tab)
- The Register theregister.com
- TechRadar techradar.com
- GovInfoSecurity govinfosecurity.com
Cite this case
Cisco Talos finds over 1,100 Ollama LLM servers open to the internet without authentication. AI Threat Watch, case talos-exposed-ollama-servers, Sep 2, 2025. https://aithreat.io/cases/talos-exposed-ollama-servers/
Permanent link: https://aithreat.io/cases/talos-exposed-ollama-servers/