github.com
https://github.com/open-webui/open-webui CVE-2026-70487
MEDIUM
Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadata
Record summary
CVE-2026-70487 has a selected CVSS score of 5.3 (medium).
Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.8 until 0.11.0, inline direct model metadata accepted client-supplied knowledge attachments without filtering them against the caller's read access. Any authenticated user who knew another user's file id could have the builtin knowledge tools return indexed chunks from that file, causing a read-only cross-user confidentiality loss while leaving knowledge-base permissions and saved workspace model validation unaffected. This issue is fixed in 0.11.0.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 5, 2026 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
open-webuiBrowse open-webui / open-webui | CVE List | >= 0.8.8, < 0.11.0 | affected |
open-webuiBrowse PyPI / open-webui | GitHub Advisory | 0.8.8 to < 0.11.0 · Fixed in 0.11.0 | affected |
References
4github.com
https://github.com/open-webui/open-webui/commit/305880f2e2aeb2dda2f4b2a18a20bdcd558f7134 github.com
https://github.com/open-webui/open-webui/releases/tag/v0.11.0 github.comConfirmation
https://github.com/open-webui/open-webui/security/advisories/GHSA-6xhv-rxhv-pwm4