
POC for CVE-2026-7720 - Ollama tensor digest path traversal
Ollama arbitrary file read via tensor digest path traversal. Exfiltrates SSH host keys (and any other file) from a reachable Ollama host in three unauthenticated API calls.
Writeup:
python3 poc.py <HOST:PORT>
Tries all three SSH host key types with known sizes and prints whatever it captures.