CVE-2026-19334

NightTrek Ollama-mcp is affected by a local command-injection in src/index.ts caused by manipulation of the argument name/model/file/source/destination. The issue exists up to the commit 80cf2e17cfc144963a475b619093a2d13c13dbc9, with no public version details due to rolling-release delivery. Expl...