CVE-2026-70484
Received Received - Intake

Open WebUI Image Generation Permission Bypass

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: GitHub, Inc.

Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.0, the legacy chat-completions features block trusted a client-supplied image_generation flag and did not re-check the features.image_generation permission that the direct image routes and native function-calling path enforce. An authenticated user whose image-generation permission had been revoked could still consume the operator's configured image provider through chat completions, spending API credits and provider quota and writing generated files to operator storage, without exposing provider credentials or other users' data. This issue is fixed in 0.11.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-05
AI Q&A
2026-08-04
EPSS Evaluated
N/A
NVD
CVE-2026-70484
EUVD
EUVD-2026-52889

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
open_webui open_webui From 0.7.0 (inc) to 0.11.0 (exc)
open_webui open_webui 0.11.0
open_webui open_webui From 0.7.0 (exc) to 0.11.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in Open WebUI (versions 0.7.0 to 0.11.0) allowed authenticated users with revoked image-generation permissions to bypass restrictions and trigger image generation through the chat-completions endpoint. The system failed to re-check permissions for client-supplied feature flags, enabling unauthorized consumption of API credits, provider quota, and storage.

Detection Guidance

To detect this vulnerability, check if your Open WebUI version is between 0.7.0 and 0.10.x. Review server logs for POST requests to /api/chat/completions with function_calling set to legacy and features.image_generation flag. Look for unauthorized image generation attempts by users with revoked permissions.

Impact Analysis

If you are an Open WebUI operator, this vulnerability could lead to unauthorized users consuming your configured image provider resources, including API credits and storage. Users with revoked permissions might still generate images, potentially increasing costs and affecting system performance.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by allowing unauthorized users to consume resources like API credits and storage without proper authorization. For GDPR, this may relate to unauthorized processing of personal data if images generated contain such data. For HIPAA, unauthorized access to storage could risk exposure of protected health information if the system handles such data.

Mitigation Strategies

Upgrade Open WebUI to version 0.11.0 or later immediately. Review and revoke any unnecessary user permissions. Monitor API usage for unusual activity related to image generation. Ensure all feature flags are validated server-side.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-70484. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart