{"id":"CVE-2026-5530","title":"A flaw has been found in Ollama up to 0.18.1","summary":"A flaw has been found in Ollama up to 0.18.1. This issue affects some unknown processing of the file server/download.go of the component Model Pull API. Executing a manipulation can lead to server-side request forgery. The attack can be …","severity":"medium","cvss":6.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-918"],"published":"2026-04-05","updated":"2026-07-07","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-5530","references":[{"url":"https://vuldb.com/cve/CVE-2026-5530","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/782107","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/355283","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/355283/cti","label":"cna@vuldb.com"}],"tags":["nvd","exploit-available"],"epss":0.00297,"epssPercentile":0.226,"ingestedAt":"2026-07-07T19:42:41.424Z","exploits":{"github":1,"githubRepos":["https://github.com/davidrxchester/CVE-2026-5530"],"checkedAt":"2026-09-21T15:29:35.963Z"},"exploitAvailable":true,"slug":"CVE-2026-5530","body":"## Overview\n\nA flaw has been found in Ollama up to 0.18.1. This issue affects some unknown processing of the file server/download.go of the component Model Pull API. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":47,"depthScoreParts":{"impact":34.7,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":5352,"id":"CVE-2026-5530","ts":1788887269896,"field":"exploit_available","old":"false","new":"true"},{"seq":4235,"id":"CVE-2026-5530","ts":1788886384776,"field":"exploit_available","old":"true","new":"false"},{"seq":2991,"id":"CVE-2026-5530","ts":1788883048419,"field":"exploit_available","old":"false","new":"true"},{"seq":2020,"id":"CVE-2026-5530","ts":1788882452842,"field":"exploit_available","old":"true","new":"false"},{"seq":1096,"id":"CVE-2026-5530","ts":1788881889717,"field":"exploit_available","old":"false","new":"true"}]}