This vulnerability in Ollama (up to version 18.1) involves improper processing in the Model Pull API's file server/download.go component, leading to server-side request forgery. An attacker can remotely exploit this flaw without user interaction and with low attack complexity, leveraging limited privileges to induce the server to send crafted requests. The vulnerability does not require privileges escalation or user interaction but has low impact on confidentiality, integrity, and availability. The vendor has not issued any patch or advisory, and remediation status remains unknown.

Successful exploitation could allow an attacker to cause the vulnerable Ollama server to make arbitrary HTTP requests, potentially accessing internal resources or services not directly accessible to the attacker. The impact on confidentiality, integrity, and availability is rated low, and the overall severity is medium. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should monitor official channels for updates. Until a patch is available, consider restricting network access to the vulnerable component and applying network-level controls to limit outbound requests from the server hosting Ollama.