Shodan has indexed over 47,000 exposed Ollama instances without authentication, allowing attackers to run prompts, steal models, and exploit vulnerabilities on systems including cloud GPUs.