Description
A vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/model/name.go of the component Pull API. The manipulation leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.34.2 is sufficient to fix this issue. The identifier of the patch is dfabde4539e42ba1e1eab50a3a50b88aea7958a0. It is suggested to upgrade the affected component.
Published: 2026-10-12
Score: 6.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Server‑side request forgery
Action: Patch Now
AI Analysis

Impact

The defect lies in the IsValid function of Ollama’s Pull API, which mis‑handles model names. Based on the description, a remote attacker can craft an API call that causes the server to perform arbitrary outbound requests. This server‑side request forgery can be used to exfiltrate data, reach internal services, or be a stepping stone for further attacks.

Affected Systems

The vulnerability affects the Ollama community AI tool. All releases up to and including version 0.34.1 are vulnerable. The fix is delivered in version 0.34.2, which incorporates the commit identified by dfabde4539e42ba1e1eab50a3a50b88aea7958a0.

Risk and Exploitability

The CVSS score of 6.9 indicates moderate severity. EPSS data is not available and the issue is not listed in the CISA KEV catalog. Attackers can trigger the vulnerability remotely by sending a forged Pull request; the server is then compelled to contact arbitrary URLs, potentially exposing internal assets. The exploitation requires only the ability to reach the exposed Pull API endpoint.

Generated by OpenCVE AI on October 12, 2026 at 15:06 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Ollama to version 0.34.2 or later.
  • Apply the vendor patch identified by commit dfabde4539e42ba1e1eab50a3a50b88aea7958a0 if an upgrade is not immediately possible.
  • Implement network segmentation or firewall rules to block unexpected outbound connections from the Ollama process.

Generated by OpenCVE AI on October 12, 2026 at 15:06 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 13 Oct 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 12 Oct 2026 13:15:00 +0000

Type Values Removed Values Added
Description A vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/model/name.go of the component Pull API. The manipulation leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.34.2 is sufficient to fix this issue. The identifier of the patch is dfabde4539e42ba1e1eab50a3a50b88aea7958a0. It is suggested to upgrade the affected component.
Title Ollama Pull API name.go IsValid server-side request forgery
First Time appeared Ollama
Ollama ollama
Weaknesses CWE-918
CPEs cpe:2.3:a:ollama:ollama:*:*:*:*:*:*:*:*
Vendors & Products Ollama
Ollama ollama
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C'}

cvssV3_0

{'score': 7.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}

cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Ollama Ollama
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-13T18:48:36.706Z

Reserved: 2026-10-11T11:49:12.150Z

Link: CVE-2026-108836

cve-icon Vulnrichment

Updated: 2026-10-13T18:48:32.886Z

cve-icon NVD

Status : Deferred

Published: 2026-10-12T13:17:27.457

Modified: 2026-10-13T19:18:10.857

Link: CVE-2026-108836

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-12T15:15:09Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)