Impact

Successful exploitation of this vulnerability leads to unauthorized access and exfiltration of sensitive information stored within ChatOllama knowledge bases. As knowledge bases often contain internal documentation, private datasets, or proprietary information, this exposure can result in significant data breaches, potential compliance violations, and loss of intellectual property. Since the identifiers are sequential, an attacker can systematically scrape the entire knowledge base repository of an instance without requiring specific knowledge of existing IDs.

Recommendation

Update ChatOllama installations to a version beyond commit 96c3ce5 once a security patch is provided by the vendor. In the interim, implement strict network-level access controls for the /api/knowledgebases and /api/models/chat endpoints to restrict traffic to known, trusted internal IP ranges.

Detection

Because this vulnerability relies on sequential ID enumeration, detection teams should monitor web access logs for anomalous spikes in 200 OK responses from the /api/knowledgebases/ endpoint, specifically looking for high counts of distinct requested IDs originating from a single source IP.