CVE-2026-70494

Received Received - Intake

Privilege Escalation in Open WebUI via Folder Deletion

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: GitHub, Inc.

Description

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.0, the DELETE /api/v1/folders/{id} handler in backend/open_webui/routers/folders.py allowed a user granted write access to a shared chat folder to permanently delete chats and messages belonging to the folder owner. The cascade following the authorization check is bound to the folder owner's id, but the subfolder check accepted any inherited write grant instead of requiring ownership or administrator status. A collaborator can destroy the owner's subtree or force-move chats out of it when delete_contents=false. This issue is fixed in 0.11.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-04

Last Modified

2026-08-04

Generated

2026-08-05

AI Q&A

2026-08-05

EPSS Evaluated

N/A

NVD

CVE-2026-70494

Affected Vendors & Products

Vendor	Product	Version / Range
open_webui	open_webui	to 0.11.0 (inc)
open_webui	open_webui	0.11.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

Open WebUI versions 0.10.0 to 0.11.0 had a flaw in the DELETE /api/v1/folders/{id} endpoint. A user with write access to a shared chat folder could permanently delete chats and messages belonging to the folder owner. The issue occurred because the authorization check allowed inherited write grants instead of requiring ownership or admin rights.

Impact Analysis

If you use Open WebUI versions 0.10.0 to 0.11.0, an attacker with write access to a shared folder could delete your chats and messages. This could result in loss of important data, disrupt workflows, or expose sensitive information if messages are force-moved out of protected folders.

Compliance Impact

This vulnerability could lead to unauthorized data deletion or exposure, violating GDPR's integrity and availability principles or HIPAA's integrity and confidentiality requirements. Compliance may be impacted if sensitive data is lost or improperly accessed due to the flaw.

Mitigation Strategies

Upgrade Open WebUI to version 0.11.0 or later to address the vulnerability in the DELETE /api/v1/folders/{id} handler.

Hi! I’m here to help you understand CVE-2026-70494. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70