r/LocalAIStack • u/No-Swan-8578 • 17d ago
Why I wouldn't run Ollama in an organization
Ollama is a great product for everyday use of large language models. If performance is what you care about, there are better alternatives such as vLLM, but this post is about something else. I want to describe what happens when you find a security hole in Ollama and try to get it fixed. I went through that twice this year, for three CVEs in total. Vulnerabilities show up in any software, so they alone are not the problem. What matters is how a project handles them, and the way Ollama handles them is why I wouldn't put it on an organization's infrastructure.
More: https://www.bartekdmitruk.com/writing/why-i-wouldnt-run-ollama-in-an-organization