CVE-2026-108836

A Server-Side Request Forgery (SSRF) vulnerability exists in Ollama versions up to 0.34.1 . The flaw is located in the IsValid function within the types/model/name.go file of the Pull API component. This vulnerability allows for remote exploitation, and public exploits have been disclosed. To rem...