Access Control Flaw in Open WebUI Affects Self-hosted AI Platforms

CVE-2026-29070

What is CVE-2026-29070?

Open WebUI, a self-hosted artificial intelligence platform, contains an access control issue that allows an authenticated user to delete files from knowledge bases without proper checks. Prior to version 0.8.6, the system only verified if a user had write access or was an admin, neglecting to confirm whether the file belonged to their knowledge base. This oversight enables the potential deletion of arbitrary files if an attacker knows the file ID. The vulnerability has been addressed in the latest version, which implements necessary checks to ensure secure file handling.

References