CVE-2026-111702 Details

A vulnerability exists in ChatOllama in versions through commit 96c3ce5, allowing remote attackers to access private knowledge bases of other users. This insecure direct object reference (IDOR) vulnerability arises from the absence of proper ownership checks in the application's API. Attackers can exploit this by supplying sequential IDs to access metadata and document content from knowledge bases that are not theirs. The vulnerability is present in a multi-user environment where knowledge bases are assigned to individual users and can be marked as private or public.

To address this vulnerability, implement ownership checks in the API endpoints that read knowledge base data. This can be done by adding a requirement for knowledge base ownership verification immediately after loading a knowledge base in the 'GET /api/knowledgebases/[id]' and 'POST /api/models/chat' handlers. Additionally, consider centralizing knowledge base access controls to ensure all routes consistently enforce ownership checks.