CVE-2026-108836

🗓️ 12 Oct 2026 12:45:16Reported by MendType

A vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/model/name.go of the component Pull API. The manipulation leads to server-side request forgery. It is possible to initiate the at...

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2026-108836	12 Oct 202613:15	–	circl
CVE	CVE-2026-108836	12 Oct 202612:45	–	cve
Cvelist	CVE-2026-108836 Ollama Pull API name.go IsValid server-side request forgery	12 Oct 202612:45	–	cvelist
EUVD	EUVD-2026-97364	12 Oct 202612:45	–	euvd
NVD	CVE-2026-108836	12 Oct 202613:17	–	nvd
Positive Technologies	PT-2026-110553	12 Oct 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-108836	13 Oct 202607:38	–	redhatcve
Vulnrichment	CVE-2026-108836 Ollama Pull API name.go IsValid server-side request forgery	12 Oct 202612:45	–	vulnrichment

Source	Link
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/108xxx/CVE-2026-108836.json
github	www.github.com/aLtEr6/test/blob/main/test.pdf
vuldb	www.vuldb.com/submit/972855
github	www.github.com/ollama/ollama/pull/18512
github	www.github.com/ollama/ollama/releases/tag/v0.34.2
github	www.github.com/aLtEr6/test.git
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-108836
github	www.github.com/ollama/ollama/commit/dfabde4539e42ba1e1eab50a3a50b88aea7958a0
vuldb	www.vuldb.com/cve/CVE-2026-108836
vuldb	www.vuldb.com/vuln/416610

13 Oct 2026 12:50Current

6.5Medium risk

Vulners AI Score6.5

CVSS 46.9

CVSS 3.17.3

CVSS 37.3

CVSS 27.5

EPSS0.00466

CWE-918