Vulnerability · Published Aug 4, 2026 · Assigned by GitHub_M
CVE-2026-70481Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages
Medium 5.4
In plain English
A medium-severity improper access control in open-webui from open-webui. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Official description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.0, the standard channel message update and delete handlers accepted any caller holding write access on the channel without checking that the caller wrote the message. Because write access is the same grant a member needs to post, any ordinary participant in a shared standard channel could rewrite or permanently delete another participant message, while group and direct message handlers enforced authorship. This issue is fixed in 0.11.0.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | open-webui | 0.11.0 | GHSA-mj5r-jf49-m3w7 |
| PyPI | open-webui | 0.11.0 | PYSEC-2026-3649 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| open-webui | open-webui | >= 0.5.0, < 0.11.0 |
Weakness: CWE-284, CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
References
- https://github.com/open-webui/open-webui/security/advisories/GHSA-mj5r-jf49-m3w7 x_refsource_CONFIRM
- https://github.com/open-webui/open-webui/pull/27197 x_refsource_MISC
- https://github.com/open-webui/open-webui/commit/c609ec41154fa092fa0af80d9d365de06b666286 x_refsource_MISC
- https://github.com/open-webui/open-webui/releases/tag/v0.11.0 x_refsource_MISC