TI-2026-75488 CVE-2026-111702 · GHSA-7pf8-cp62-gc3p
ChatOllama flaw lets remote attackers read private knowledge bases
Priority HIGH 77
ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that allows remote attackers to access other users' private knowledge bases by supplying sequential ids.