Socket.IO Authorization Bypass in Open WebUI AI Platform

CVE-2026-54022

What is CVE-2026-54022?

Open WebUI, a self-hosted AI platform, has a vulnerability in the Socket.IO handler responsible for document access. Prior to version 0.8.11, this handler checks note ownership only when the document ID format begins with 'note:'. However, due to the normalization of document IDs where colons are replaced with underscores, an attacker can exploit this flaw by joining a document room using an ID formatted with an underscore instead. This circumvents the intended authorization checks, allowing unauthorized access to Yjs documents. As a result, sensitive information contained in private notes may be exposed to attackers. This issue is patched in version 0.8.11.

References