Ollama Pull API has SSRF vulnerability CVE-2026-108836

Ollama 0.34.1 and earlier versions have a server-side request forgery (SSRF) vulnerability in the Pull API; upgrading to 0.34.2 fixes it. The vulnerability is in the IsValid function in types/model/name.go, which mishandles model names, allowing remote attackers to craft API calls that make the server send requests to arbitrary URLs, potentially leaking data or accessing internal services. The vulnerability is CVE-2026-108836, with a CVSS v4.0 score of 6.9 (medium) and a v3.1 score of 7.3. Exploit code is publicly available, and the patch commit is dfabde4539e42ba1e1eab50a3a50b88aea7958a0.