Vulnerability · Published Aug 4, 2026 · Assigned by GitHub_M
CVE-2026-70483Open WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpoint
Low 3.1
In plain English
A low-severity missing authorization in open-webui from open-webui. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, DELETE /api/v1/chats/{id} cancelled a chat's in-flight tasks before checking whether the caller could delete that chat. Any authenticated user who knew another user's chat id could abort that user's running model response, title generation, or tag generation, even though the delete was refused and no chat data was deleted, modified, or disclosed. This issue is fixed in 0.11.0.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | open-webui | 0.11.0 | GHSA-3vf6-64vr-3g56 |
| PyPI | open-webui | 0.11.0 | PYSEC-2026-3640 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| open-webui | open-webui | >= 0.9.6, < 0.11.0 |
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
References
- https://github.com/open-webui/open-webui/security/advisories/GHSA-3vf6-64vr-3g56 x_refsource_CONFIRM
- https://github.com/open-webui/open-webui/pull/27006 x_refsource_MISC
- https://github.com/open-webui/open-webui/commit/4f93c3e36c1734342a32c312bdb0516c66d8e93c x_refsource_MISC
- https://github.com/open-webui/open-webui/releases/tag/v0.11.0 x_refsource_MISC