175,000 Exposed Ollama Hosts Enable Code Execution and External System Access

Researchers discovered roughly 175,000 publicly reachable Ollama servers caused by simple misconfiguration (binding to 0.0.0.0), creating widespread risk of remote code execution and unauthorized access; nearly half of hosts support tool-calling (38% with text completion and tool execution), many have vision and reasoning capabilities, and a monoculture of identical model formats amplifies the potential blast radius across 130 countries and 4,032 ASNs.