Vulnerability · Published May 15, 2026 · Assigned by GitHub_M

CVE-2026-44553Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access

High 8.1

In plain English

A high-severity security flaw in open-webui from open-webui. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.1High

Exploit odds (30 days)0.3%top 79.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, administrative role changes and user deletions do not iterate SESSION_POOL to disconnect affected sessions. As a result, a user whose admin role has been revoked retains admin privileges within their existing Socket.IO session for as long as they keep the connection alive (via automatic heartbeats). The gap is exclusive to the Socket.IO session cache. This vulnerability is fixed in 0.9.0.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	open-webui	0.9.0	GHSA-45m8-cpm2-3v65
PyPI	open-webui	0.9.0	PYSEC-2026-2697

Affected products (as reported)

Vendor	Product	Versions
open-webui	open-webui	< 0.9.0

Weakness: CWE-613 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

References

https://github.com/open-webui/open-webui/security/advisories/GHSA-45m8-cpm2-3v65 x_refsource_CONFIRM