Report: Ultimate Guide: CVE-2026-5530 - Ollama Model Pull API download.go server-side request forgery

Report: Ultimate Guide: CVE-2026-5530 - Ollama Model Pull API download.go server-side request forgery

CVE ID :CVE-2026-5530 Published : April 5, 2026, 1:16 a.m. | 1 hour, 14 minutes ago Description :A flaw has been found in Ollama up to 18.1. This issue affects some unknown processing of the file server/download.go of the component Model Pull API. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
April 5, 2026