CVE-2026-111702

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-111702

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-111702.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-111702

Published

2026-10-16T17:39:55Z

Modified

2026-10-17T10:30:29Z

Severity

8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

ChatOllama through commit 96c3ce5 IDOR Exposes Private Knowledge Bases

Details

ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that allows remote attackers to access other users' private knowledge bases by supplying sequential ids. Attackers can enumerate ids via GET /api/knowledgebases/{id} or the knowledgebaseId parameter of POST /api/models/chat to read metadata and retrieved document content.

Database specific

{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-639"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111702.json"
}

References

Affected packages

Git / github.com/sugarforever/chat-ollama

Affected ranges

Type: GIT
Repo: https://github.com/sugarforever/chat-ollama
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last Affected

96c3ce50c3ba4ec3b19f126f50c035f84183f9fc

Affected versions

agent-v0.*

agent-v0.1.0

agent-v0.2.0

agent-v0.3.0

agent-v0.4.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-111702.json"