ChatOllama: Insecure direct object reference exposes private knowledge bases

Summary

ChatOllama's knowledge base feature does not check ownership of knowledge base IDs. An attacker can enumerate sequential IDs via GET /api/knowledgebases/{id} or the knowledgebaseId parameter of POST /api/models/chat to read metadata and retrieved document content of other users. The impact is greatest on shared, multi-user instances. Sources disagree on whether an account is required, and the CVSS vector assumes none.

Affected

• sugarforever ChatOllama through commit 96c3ce5 (CVE record: 0 to <= 96c3ce50c3ba4ec3b19f126f50c035f84183f9fc)
• Affected release version numbers: Unknown.
• The CVE references point to commit 6f4245a96b58ce8833a8c51d90d923b0e9814784; its relation to 96c3ce5 is not confirmed.

Fixed in

Unknown. No vendor advisory, security advisory or patched release has been found.

Workaround

• No vendor workaround found.
• Restrict access to trusted users and disable self-registration.
• Do not expose the instance directly to the internet; place it behind a VPN or an SSO/reverse proxy with access control.

Exploitation

• CISA SSVC (ADP): exploitation 'poc', automatable yes, technical impact partial.
• A public write-up exists; its content was not reviewed.
• Not listed in CISA KEV.
• No evidence of in-the-wild exploitation found.

Our recommendation

• Check whether ChatOllama is in use and whether it is reachable from the internet or shared by several users.
• Restrict access now as described under workaround.
• Review stored knowledge bases for confidential data.
• Monitor the upstream repository for a fix after commit 96c3ce5 and update promptly once one is confirmed.

Public exploits iAttack code is publicly available (PoC on GitHub, Metasploit or Exploit-DB).

PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.

Research sources

• VulnCheck advisory www.vulncheck.com
• VulDB CVE-2026-111702 vuldb.com
• Strix CVE-2026-111702 www.strix.ai
• HackMD write-up (not reviewed) hackmd.io
• ChatOllama knowledge base endpoint (commit 6f4245a) github.com
• ChatOllama chat endpoint (commit 6f4245a) github.com
• CVE JSON record (CVE Project) raw.githubusercontent.com
• CVE Brief summary cvebrief.com

Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 02:11.