CVE-2026-111702
Received Received - Intake

Insecure Direct Object Reference in ChatOllama

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: VulnCheck

Description
ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that allows remote attackers to access other users' private knowledge bases by supplying sequential ids. Attackers can enumerate ids via GET /api/knowledgebases/{id} or the knowledgebaseId parameter of POST /api/models/chat to read metadata and retrieved document content.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-16
Last Modified
2026-10-16
Generated
2026-10-16
AI Q&A
2026-10-16
EPSS Evaluated
N/A
NVD
CVE-2026-111702
EUVD
EUVD-2026-102994

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sugarforever chat-ollama 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

ChatOllama has an insecure direct object reference vulnerability where attackers can access other users' private knowledge bases by guessing sequential IDs. This is possible through specific API endpoints like GET /api/knowledgebases/{id} or POST /api/models/chat with the knowledgebaseId parameter.

Detection Guidance

To detect this vulnerability, check for unauthorized access to knowledge bases by monitoring GET requests to /api/knowledgebases/{id} or POST requests to /api/models/chat with knowledgebaseId parameters. Look for sequential ID enumeration attempts or unusual access patterns to private data.

Impact Analysis

Attackers can read sensitive data stored in private knowledge bases, including metadata and document content. This could lead to unauthorized access to confidential information, intellectual property, or personal data.

Compliance Impact

This vulnerability could violate data protection regulations like GDPR and HIPAA by exposing personal or sensitive data without authorization. Organizations using ChatOllama may face compliance failures, legal penalties, and reputational damage.

Mitigation Strategies

Immediately update ChatOllama to the latest version to patch the insecure direct object reference. Implement access controls to restrict knowledge base ID enumeration and enforce authentication for all API endpoints. Review logs for signs of exploitation and restrict network access to the API if possible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-111702. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart