[Bug] Click on the ollama model. If the model does not exist, it will not report that it does not exist, but will download it directly. If it blows up the server, it could become an attack

[zhainanshidai]

Contact Information

No response

MaxKB Version

v2.2.0

Problem Description

ollama是不需要key的，知道了地址，mk里连接ollama模型，如果模型不存在，这时不是报不存在，是直接去下载模型。如果用的是qwen3 235b 几百个G 撑爆服务器，可能成为一次攻击

Steps to Reproduce

The expected correct result

No response

Related log output

Additional Information

No response

[Shenguobin0102]

如果担心这样的攻击，可以将创建模型的权限收回到管理员手中。

[shaohuzhang1]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

If you are concerned about such an attack, you can take back the ability to create models back to the administrator.