Live › vulnerability › CVE-2026-111702
Go to dashboardChatOllama's GET /api/knowledgebases/{id} and POST /api/models/chat (knowledgebaseId) skip the ownership check that the update and delete routes use (requireKnowledgeBaseOwner). Ids are sequential integers, so any caller can enumerate other users' private knowledge bases: metadata via the GET route, ingested document text via the chat route's relevant_docs. KNOWLEDGE_BASE_ENABLED=true ships in .env.example. The researcher says a normal logged-in account is enough; the CVE scores it as no privileges required. No patched release is published.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| chat-ollama | github | <= 96c3ce50c3ba4ec3b19f126f50c035f84183f9fc | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that allows remote attackers to access other users' private knowledge bases by supplying sequential ids. Attackers can enumerate ids via GET /api/knowledgebases/{id} or the knowledgebaseId parameter of POST /api/models/chat to read metadata and retrieved document content.
This page as .md · .json · in your agent: get_signal("CVE-2026-111702")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.