This vulnerability in Ollama up to version 18.1 involves improper handling of requests in the Model Pull API's file server/download.go component, which can be exploited remotely to perform server-side request forgery. The attacker can manipulate the server into making unauthorized requests to internal or external resources. The vendor has not issued any advisory or patch, and no known exploits are reported in the wild. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and low to limited impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to cause the Ollama server to make arbitrary requests, potentially accessing internal resources or services not otherwise exposed. The impact is rated medium due to limited confidentiality, integrity, and availability impacts and the requirement for some privileges. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should monitor official channels for updates. Until a patch is available, consider restricting network access to the affected API and applying network-level controls to limit the server's ability to make arbitrary outbound requests.