Authorization Flaw in Open WebUI AI Platform
CVE-2026-54015

6.4MEDIUM

Key Information:

Vendor

Open-webui

Status
Open-webui
Vendor
CVE Published:
23 June 2026

What is CVE-2026-54015?

Open WebUI, a self-hosted artificial intelligence platform, has a significant authorization flaw that enables authenticated users to access and manipulate the private prompt history of other users. This vulnerability arises from the system's reliance on URL-based authorization checks for prompt version-history endpoints, allowing unauthorized access to users' sensitive data if the caller can supply the relevant history IDs. The affected endpoints, which include /api/v1/prompts/id/{prompt_id}/history/diff, /api/v1/prompts/id/{prompt_id}/update/version, and /api/v1/prompts/id/{prompt_id}/history/{history_id}, do not sufficiently verify the ownership of prompt history records. The issue has been resolved in version 0.9.6.

Affected Version(s)

open-webui < 0.9.6

References

https://github.com/open-webui/open-webui/security/advisor...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.