Based on the revised description, the vulnerability exists in Ollama versions up to 0.18.1 and involves an unspecified processing issue in the Model Pull API's download.go file. An attacker who crafts inputs to this endpoint can trick the server into making unauthorized HTTP calls to arbitrary resources, which is a classic server‑side request forgery (CWE‑918). The description indicates that remote exploitation can occur without authentication, allowing the server to act as a proxy to reach protected resources.

The flaw affects all installations of Ollama version 0.18.1 or earlier. Any instance running those versions exposes the Model Pull API endpoint, and if that endpoint is reachable from the Internet it is at risk. The vulnerability is confined to the download functionality of the API.

The CVSS score is 5.3, indicating moderate severity. The EPSS score is less than 1%, implying a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalogue. The CVE description does not mention an authentication requirement; thus it is inferred that the API endpoint may be accessed without authentication. Consequently, any client that can reach the endpoint could potentially exploit the flaw, making publicly exposed instances a significant threat.