CVE-2026-70487

Received Received - Intake

Information Disclosure in Open WebUI

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: GitHub, Inc.

Description

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.8 until 0.11.0, inline direct model metadata accepted client-supplied knowledge attachments without filtering them against the caller's read access. Any authenticated user who knew another user's file id could have the builtin knowledge tools return indexed chunks from that file, causing a read-only cross-user confidentiality loss while leaving knowledge-base permissions and saved workspace model validation unaffected. This issue is fixed in 0.11.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-04

Last Modified

2026-08-04

Generated

2026-08-05

AI Q&A

2026-08-05

EPSS Evaluated

N/A

NVD

CVE-2026-70487

EUVD

EUVD-2026-52897

Affected Vendors & Products

Vendor	Product	Version / Range
open_webui	open_webui	From 0.8.8 (inc) to 0.11.0 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

Open WebUI versions 0.8.8 to 0.11.0 had a flaw where inline direct model metadata accepted client-supplied knowledge attachments without checking read access. Authenticated users could exploit this by using another user's file ID to retrieve indexed chunks from that file, causing a read-only cross-user confidentiality breach.

Impact Analysis

If you use Open WebUI versions 0.8.8 to 0.11.0, an attacker with your file ID could access sensitive data from your files without proper authorization. This could lead to unauthorized data exposure while leaving permissions and saved workspaces unaffected.

Compliance Impact

This vulnerability could violate GDPR or HIPAA by allowing unauthorized access to personal or health data. Organizations using affected versions may face compliance breaches, legal penalties, and reputational damage due to data exposure.

Mitigation Strategies

Upgrade Open WebUI to version 0.11.0 or later to address the vulnerability. Ensure all users are authenticated and review file access permissions to prevent unauthorized data exposure.

Hi! I’m here to help you understand CVE-2026-70487. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70