CVE-2026-70483
LOWOpen WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpoint
Title source: cnaDescription
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, DELETE /api/v1/chats/{id} cancelled a chat's in-flight tasks before checking whether the caller could delete that chat. Any authenticated user who knew another user's chat id could abort that user's running model response, title generation, or tag generation, even though the delete was refused and no chat data was deleted, modified, or disclosed. This issue is fixed in 0.11.0.
References (4)
Core 4
Core References
X_Refsource_Confirm x_refsource_confirm
https://github.com/open-webui/open-webui/security/advisories/GHSA-3vf6-64vr-3g56
X_Refsource_Misc x_refsource_misc
https://github.com/open-webui/open-webui/pull/27006
X_Refsource_Misc x_refsource_misc
https://github.com/open-webui/open-webui/commit/4f93c3e36c1734342a32c312bdb0516c66d8e93c
X_Refsource_Misc x_refsource_misc
https://github.com/open-webui/open-webui/releases/tag/v0.11.0
Scores
CVSS v3
3.1
EPSS
0.0024
EPSS Percentile
15.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
Details
CWE
CWE-862
Status
published
Products (2)
open-webui/open-webui
>= 0.9.6, < 0.11.0
pypi/open-webui
0.9.6 - 0.11.0PyPI
Published
Aug 04, 2026
Tracked Since
Aug 05, 2026