The vulnerability in ChatOllama identified by commit 96c3ce5 is an insecure direct object reference that permits remote attackers to access other users' private knowledge bases by supplying sequential identifiers. Through the GET /api/knowledgebases/{id} endpoint or the knowledgebaseId parameter in POST /api/models/chat, attackers can retrieve metadata and document content that should be restricted to the owner. This flaw discloses confidential information, violating the confidentiality of knowledge base contents and thereby representing a significant breach.

The affected product is Sugarforever's ChatOllama. All releases that incorporate code changes older than commit 96c3ce5 remain vulnerable. Any deployment running a codebase that includes these earlier changes continues to be exposed until patched to a newer release that contains the commit or later.

The CVSS base score of 8.7 classifies the vulnerability as high severity. No EPSS score is available, and the vulnerability is not cataloged in CISA's KEV. Attackers can exploit the issue remotely via the public API endpoints without the need for any authentication; based on the description, it is inferred that no authentication is required. By enumerating sequential identifiers manually or programmatically, attackers can discover valid knowledge base IDs and retrieve private metadata and document content. The combination of high severity and broad attack surface makes this a significant threat for exposed instances of ChatOllama.