Chat Ollama
Monthly
An insecure direct object reference (IDOR) in ChatOllama (sugarforever/chat-ollama) through commit 96c3ce5 lets remote attackers read other users' private knowledge bases by supplying sequential integer identifiers. According to the supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N, VC:H with no integrity or availability impact, base 8.7), the exposure is a network-reachable, low-complexity, read-only disclosure that requires no privileges or user interaction, although defenders should confirm whether their deployment actually enforces authentication in front of the API. Affected endpoints are GET /api/knowledgebases/{id} and the knowledgebaseId parameter of POST /api/models/chat; the impact is limited to metadata and retrieved document content of other tenants, with no write or denial-of-service component. No public exploit code or confirmed active exploitation was identified at time of analysis; the primary risk driver is the predictable, non-tenant-scoped ID space rather than a remotely weaponized exploit.
An insecure direct object reference (IDOR) in ChatOllama (sugarforever/chat-ollama) through commit 96c3ce5 lets remote attackers read other users' private knowledge bases by supplying sequential integer identifiers. According to the supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N, VC:H with no integrity or availability impact, base 8.7), the exposure is a network-reachable, low-complexity, read-only disclosure that requires no privileges or user interaction, although defenders should confirm whether their deployment actually enforces authentication in front of the API. Affected endpoints are GET /api/knowledgebases/{id} and the knowledgebaseId parameter of POST /api/models/chat; the impact is limited to metadata and retrieved document content of other tenants, with no write or denial-of-service component. No public exploit code or confirmed active exploitation was identified at time of analysis; the primary risk driver is the predictable, non-tenant-scoped ID space rather than a remotely weaponized exploit.