PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-108836 Ollama CVE debrief

A vulnerability in Ollama's Pull API, specifically in the `IsValid` function of `types/model/name.go`, allows for server-side request forgery (SSRF). This issue, affecting versions up to 0.34.1, can be exploited remotely. The vulnerability is addressed in version 0.34.2, which includes a patch (dfabde4539e42ba1e1eab50a3a50b88aea7958a0). Defenders should review the official advisory and assess their exposure. Compensating controls and monitoring may be necessary until an upgrade can be implemented.

Vendor
Ollama
Product
Ollama
CVSS
MEDIUM 6.9
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-12
Original CVE updated
2026-10-12
Advisory published
2026-10-12
Advisory updated
2026-10-12

Who should care

Defenders of Ollama instances, especially those using versions up to 0.34.1, should assess their exposure and consider upgrading to version 0.34.2. This includes reviewing system logs for potential SSRF attacks and verifying instance exposure. Security teams and vulnerability management teams should prioritize this vulnerability and coordinate with operators to apply the patch.

Why it matters

CVE-2026-108836 is a server-side request forgery vulnerability in Ollama's Pull API, affecting versions up to 0.34.1. Defenders should verify exposure and upgrade to version 0.34.2 to mitigate potential risks.

  • Potential for unauthorized requests to internal or external resources
  • Possible data breaches or system compromise
  • Need for verification of Ollama instance exposure
  • Priority on upgrading to patched version 0.34.2

Technical summary

The `IsValid` function in `types/model/name.go` of Ollama's Pull API is vulnerable to server-side request forgery (SSRF). This allows remote attackers to manipulate the server into making unintended requests. The vulnerability can be addressed by upgrading to version 0.34.2, which includes a patch (dfabde4539e42ba1e1eab50a3a50b88aea7958a0). Defenders should prioritize verifying exposure and applying the patch as soon as possible. The vulnerability has a CVSS score of 6.9 and is considered medium severity. The affected component is the Pull API, and the vulnerability is exploitable remotely.

Defensive priority

Defenders should prioritize verifying exposure of Ollama instances, especially those using versions up to 0.34.1, and upgrade to version 0.34.2.

Recommended defensive actions

  • Verify Ollama instance exposure, especially for versions up to 0.34.1.
  • Review the official advisory for CVE-2026-108836.
  • Upgrade affected Ollama instances to version 0.34.2.
  • Monitor for potential SSRF attacks.
  • Review compensating controls for exposed systems.
  • Track exceptions and retest remediated assets.
  • Check relevant monitoring, detection, and logs for exposed assets.

Evidence notes

The CVE record and source item provide details on the vulnerability, its impact, and the available patch. However, additional information on potential exploits or affected systems is limited. Defenders should verify Ollama instance exposure, especially for versions up to 0.34.1, and review system logs for potential SSRF attacks. The patch provided in version 0.34.2 should be applied as soon as possible.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-108836 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-108836

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-108836 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-108836

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Ollama Pull API name.go IsValid server-side request forgery

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108836.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/vuln/416610

    Supplemental source - vdb-entry, technical-description

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/vuln/416610/cti

    Supplemental source - signature, permissions-required

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/cve/CVE-2026-108836

    Supplemental source - third-party-advisory

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/submit/972855

    Supplemental source - third-party-advisory

  • Source reference

    Unverified legacy reference

    URL: https://github.com/aLtEr6/test.git

    Supplemental source - related

  • Source reference

    Unverified legacy reference

    URL: https://github.com/ollama/ollama/pull/18512

    Supplemental source - issue-tracking, patch

  • Source reference

    Unverified legacy reference

    URL: https://github.com/aLtEr6/test/blob/main/test.pdf

    Supplemental source - exploit

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.