Image Editing Privilege Escalation in Open WebUI

Executive Summary

The CVE-2026-59227 vulnerability in Open WebUI is an authorization bypass issue affecting the POST /api/v1/images/edit endpoint. From versions 0.8.11 up to but not including 0.10.0, this endpoint required only a verified user account and did not enforce the global image-edit switch or per-user image-generation permissions. This allowed authenticated non-admin users to perform server-side image editing using administrator-configured provider credentials, even when image editing was globally disabled or the user lacked the necessary permissions.

The vulnerability was fixed in version 0.10.0 by adding proper authorization checks that enforce both the global ENABLE_IMAGE_EDIT setting and the per-user image-generation permission before allowing image edits.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows authenticated non-admin users to bypass security controls and perform unauthorized image editing operations on the server. They can invoke image editing functionality using administrator-configured provider credentials, potentially generating billable requests without authorization.

While the vulnerability does not expose cross-user data, it can lead to unauthorized use of resources and increased costs due to unintended billable image editing requests. It may also undermine administrative controls intended to restrict image editing capabilities.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by monitoring or testing access to the POST /api/v1/images/edit endpoint to see if non-admin users are able to invoke image editing functionality despite global or per-user restrictions.

You can attempt to reproduce the issue by sending a POST request to /api/v1/images/edit as a verified non-admin user and checking if the request succeeds even when the global image editing switch (ENABLE_IMAGE_EDIT) is disabled or the user lacks image-generation permissions.

• Use a command-line tool like curl to test the endpoint, for example: curl -X POST -H "Authorization: Bearer <non-admin-token>" https://<your-open-webui-server>/api/v1/images/edit -d '{"image_data": "..."}'
• Check server logs for unauthorized image editing requests from non-admin users.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows authenticated non-admin users to perform unauthorized image editing using administrator-configured provider credentials without proper authorization checks.

However, the issue does not expose cross-user data or sensitive personal information.

Given that no personal data leakage or compromise of confidentiality, integrity, or availability of user data is indicated, the direct impact on compliance with standards like GDPR or HIPAA is likely limited.

Nonetheless, unauthorized use of administrator credentials and bypassing permission controls could be considered a security control failure, which may have indirect compliance implications depending on the regulatory environment and organizational policies.

Useful 0 Not Useful 0

Mitigation Strategies

The primary mitigation step is to upgrade Open WebUI to version 0.10.0 or later, where the vulnerability is fixed by enforcing proper authorization checks on the /api/v1/images/edit endpoint.

Until the upgrade can be applied, consider restricting access to the /api/v1/images/edit endpoint to trusted admin users only, or disabling image editing functionality globally if possible.

Review and enforce user permissions carefully, ensuring that only users with explicit image-generation permissions can access image editing features.

Useful 0 Not Useful 0