Access Control Flaw in Open WebUI Affects User Data Security
CVE-2026-59225

5.4MEDIUM

Key Information:

Vendor

Open-webui

Status
Open-webui
Vendor
CVE Published:
9 July 2026

What is CVE-2026-59225?

Open WebUI is a self-hosted AI platform that allows users to configure and access various models. A vulnerability exists where authenticated non-admin users with read access can reach a restricted underlying model through certain API endpoints. Specifically, task endpoints can be exploited due to a flaw in how access checks are performed, allowing users to bypass intended restrictions. This issue has been addressed in version 0.10.0, and it is critical for all users operating vulnerable versions to update immediately to safeguard their data.

Affected Version(s)

open-webui >= 0.8.12, < 0.10.0

References

https://github.com/open-webui/open-webui/security/advisor...
x_refsource_CONFIRM
https://github.com/open-webui/open-webui/pull/26046
x_refsource_MISC
https://github.com/open-webui/open-webui/commit/dc4924b66...
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.