CVE-2026-108836

A flaw was found in Ollama. Improper input validation within the model name parsing logic allows a remote attacker to conduct a Server-Side Request Forgery SSRF attack through the pull API. By supplying a crafted model name, an attacker can coerce the server into sending unauthorized network...