CVE-2026-87014

Analyzed Analyzed - Analysis Complete

Role Privilege Escalation in Open WebUI

Publication date: 2026-09-09

Last updated on: 2026-09-15

Assigner: GitHub, Inc.

Description

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, role synchronization in backend/open_webui/routers/auths.py and backend/open_webui/utils/oauth.py updated an administrator's database role without invalidating the user record cached by backend/open_webui/socket/main.py. An administrator demoted through a trusted role header or OAuth role mapping could keep an already-open Socket.IO connection and continue reading or editing every user's collaborative notes until that connection closed. This issue is fixed in version 0.11.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-15

Generated

2026-09-30

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-29

NVD

CVE-2026-87014

Affected Vendors & Products

Vendor	Product	Version / Range
openwebui	open_webui	From 0.9.0 (inc) to 0.11.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-613	According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

Open WebUI versions 0.9.0 to 0.11.0 had a flaw where demoting an administrator via OAuth or role headers did not invalidate their cached user record. This allowed the demoted admin to retain access to Socket.IO connections, enabling them to read or edit all collaborative notes until the connection closed.

Detection Guidance

This vulnerability involves improper role synchronization in Open WebUI versions 0.9.0 to 0.11.0, allowing demoted administrators to retain elevated access via Socket.IO connections. To detect it, check Open WebUI version with: docker inspect open-webui | grep Version or cat /app/backend/open_webui/__init__.py | grep version. Monitor active Socket.IO connections for unusual administrative access patterns.

Impact Analysis

If you use Open WebUI in versions 0.9.0 to 0.11.0, a previously privileged user could maintain unauthorized access to sensitive collaborative notes even after being demoted. This could lead to data leaks or unauthorized modifications.

Compliance Impact

This vulnerability could violate GDPR or HIPAA by allowing unauthorized access to sensitive user data (collaborative notes). Unauthorized access risks non-compliance with data protection requirements, potentially leading to legal or regulatory penalties.

Mitigation Strategies

Upgrade Open WebUI to version 0.11.1 or later to address the role synchronization issue. Monitor active Socket.IO connections and terminate any suspicious or unauthorized connections.

Hi! I’m here to help you understand CVE-2026-87014. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70