Vulnerability in Open WebUI Affects Write Access to Knowledge Base

CVE-2026-70488

What is CVE-2026-70488?

The Open WebUI platform, a self-hosted AI application, has a significant vulnerability in the sync cleanup endpoint that permits unauthorized write access to its knowledge base. This flaw, occurring in versions from 0.9.6 to 0.11.0, allows users with write access to one knowledge base to manipulate directory and file identifiers in requests, potentially deleting critical directories and removing file embeddings from a different knowledge base. As a result, certain documents may omit from retrieval results, disrupting key functionalities like chat-with-file without revealing the contents themselves. The issue has been addressed in the platform's latest version.

References