Redirecting to Bleeding Llama: When Local Ollama Leaks Memory Over the Network