Sugarforever vulnerabilities
We track 1 vulnerability in Sugarforever products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Sugarforever vulnerabilities
- 7.5 High severity
chat-ollama: Authorization Bypass Through User-Controlled Key
ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that allows remote attackers to access other users' private knowledge bases by supplying sequential ids. Attackers can enumerate ids via GET /api/knowledgebases/{id} o