Ollama Pull API has SSRF vulnerability CVE-2026-108836
Start here
Ollama 0.34.1 and earlier versions have a server-side request forgery (SSRF) vulnerability in the Pull API, located in the IsValid function in types/model/name.go, which mishandles model names. A remote attacker can craft API calls to make the server send requests to arbitrary URLs, thereby exfiltrating data or accessing internal services. The vulnerability is numbered CVE-2026-108836, with a CVSS v4.0 score of 6.9 (medium) and a v3.1 score of 7.3, and exploit code has been publicly disclosed. Upgrading to 0.34.2 fixes it.
Generated by AI from reports · Updated 23 hr ago
Progress timeline
- OpenCVEOllama Pull API has SSRF vulnerability CVE-2026-108836
Ollama 0.34.1 and earlier versions have a server-side request forgery (SSRF) vulnerability in the Pull API; upgrading to 0.34.2 fixes it. The vulnerability is in the IsValid function in types/model/name.go, which mishandles model names, allowing remote attackers to craft API calls that make the server send requests to arbitrary URLs, potentially leaking data or accessing internal services. The vulnerability is CVE-2026-108836, with a CVSS v4.0 score of 6.9 (medium) and a v3.1 score of 7.3. Exploit code is publicly available, and the patch commit is dfabde4539e42ba1e1eab50a3a50b88aea7958a0.
Related discussion
Attention trend
New sources per day
- Oct 13: 1 new sources (1 outlets, 0 accounts)
- Oct 14: 0 new sources (0 outlets, 0 accounts)