sugarforever CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH sugarforever CVE published 2026-10-16

CVE-2026-111702

CVE-2026-111702 is a high-severity vulnerability in ChatOllama, a GitHub repository by sugarforever, which allows remote attackers to access private knowledge bases due to an insecure direct object reference (IDOR) vulnerability. The vulnerability exists through commit 96c3ce5 and can be exploited by supplying sequential IDs to enumerate and access other users' private knowledge bases.