{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/nuxt-ollama-1.2.26/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["nuxt-ollama (1.2.26)"],"_cs_severities":["high"],"_cs_tags":["credential-exposure","nuxt","ollama","misconfiguration"],"_cs_type":"advisory","_cs_vendors":["Nuxt"],"content_html":"\u003cp\u003eNuxt Ollama version 1.2.26 contains a critical design flaw in its module initialization logic that leads to the exposure of sensitive configuration credentials. In the module's setup function, the entire configuration object, including the 'api_key' defined for cloud Ollama usage, is merged into the 'runtimeConfig.public.ollama' namespace.\u003c/p\u003e\n\u003cp\u003eNuxt automatically serializes the public runtime configuration and embeds it into the HTML response of every server-rendered page within the 'window.\u003cstrong\u003eNUXT\u003c/strong\u003e' object to facilitate client-side hydration. Because the 'api_key' is placed in the public configuration scope, it becomes visible in plaintext within the source code of the web page. Any unauthenticated attacker can retrieve this key by performing a simple HTTP GET request to the application. This vulnerability facilitates unauthorized access to the Ollama cloud API, allowing attackers to consume the operator's billing quotas or potentially access model resources depending on the API key scope.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eThe operator configures the application by defining 'api_key' in the Nuxt configuration as documented.\u003c/li\u003e\n\u003cli\u003eThe 'nuxt-ollama' module triggers its setup function during the application initialization process.\u003c/li\u003e\n\u003cli\u003eThe module merges the 'api_key' into the 'runtimeConfig.public.ollama' object.\u003c/li\u003e\n\u003cli\u003eThe Nuxt SSR pipeline serializes the 'runtimeConfig.public' object into an HTML script block.\u003c/li\u003e\n\u003cli\u003eThe application serves the rendered HTML containing the plaintext API key to the user browser.\u003c/li\u003e\n\u003cli\u003eThe attacker performs an unauthenticated HTTP GET request to the application's base URL.\u003c/li\u003e\n\u003cli\u003eThe attacker parses the 'window.\u003cstrong\u003eNUXT\u003c/strong\u003e' script block in the HTML response to locate the 'api_key' value.\u003c/li\u003e\n\u003cli\u003eThe attacker uses the stolen API key to authenticate unauthorized requests to the Ollama cloud API.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for the theft of Ollama cloud API keys without requiring any authentication or user interaction. Potential consequences include unauthorized usage of the Ollama cloud API at the operator's expense, rate-limit exhaustion, and potential data exfiltration if the stolen keys have broad scope. As this information is embedded directly into the SSR HTML, the exposure is persistent for all visitors and searchable by web crawlers.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003ePrioritized actions for development and security teams:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eImmediately upgrade or patch the implementation to isolate sensitive keys into the private 'runtimeConfig' object rather than 'runtimeConfig.public'.\u003c/li\u003e\n\u003cli\u003eVerify existing deployments for the presence of 'api_key' in the 'window.\u003cstrong\u003eNUXT\u003c/strong\u003e' script block by auditing the source of the home page.\u003c/li\u003e\n\u003cli\u003eRevoke any API keys previously configured in applications using version 1.2.26 of the 'nuxt-ollama' module, as these must be considered compromised.\u003c/li\u003e\n\u003cli\u003eImplement a move of the 'api_key' logic to server-side utilities (e.g., 'src/runtime/server/utils/useOllama.ts') to ensure it is never exposed to the client-side context.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-09-10T00:51:45Z","date_published":"2026-09-10T00:51:45Z","id":"https://feed.craftedsignal.io/briefs/2026-09-nuxt-ollama-leak/","summary":"The nuxt-ollama module version 1.2.26 inadvertently publishes Ollama cloud API keys in the client-side serialized runtime configuration, allowing unauthorized remote extraction via standard HTTP requests.","title":"Nuxt Ollama API Key Exposure via Public Runtime Configuration","url":"https://feed.craftedsignal.io/briefs/2026-09-nuxt-ollama-leak/"}],"language":"en","title":"CraftedSignal Threat Feed - Nuxt-Ollama (1.2.26)","version":"https://jsonfeed.org/version/1.1"}