CVE-2026-111702

7.5High

Published 16 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

7.5High

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None
Impact: High impact on confidentiality
Weakness: CWE-639

Impact

Remote attackers can read private knowledge base metadata and retrieved document contents without authentication. They only need network access to the API to enumerate sequential resource IDs.

Root cause

The API endpoints lack authorization checks when fetching knowledge bases by ID, creating an insecure direct object reference (IDOR).

Affected systems

ChatOllama through commit 96c3ce5

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Fix & remediation

Upgrade to a commit after 96c3ce5 if available. If patching must wait, block external access to GET /api/knowledgebases/* and restrict POST /api/models/chat behind reverse proxy authentication or a firewall.

shell

$ git pull origin main

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that allows remote attackers to access other users' private knowledge bases by supplying sequential ids. Attackers can enumerate ids via GET /api/knowledgebases/{id} or the knowledgebaseId parameter of POST /api/models/chat to read metadata and retrieved document content.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-111702