Authorization Bypass in Open WebUI Self-Hosted AI Platform by Open WebUI

CVE-2026-87997

What is CVE-2026-87997?

The Open WebUI platform contains a vulnerability in its API endpoints, allowing authenticated users to exploit insufficient access control. Specifically, from versions 0.10.0 to 0.11.1, an issue arises when a client-supplied folder_id is copied into new chat sessions without enforcing necessary write-access permissions. As a result, an attacker with knowledge of a shared folder identifier could inject unauthorized chat entries into folders, misleading authorized users into viewing manipulated content. This flaw underscores the importance of implementing strict access checks within collaborative platforms, which have been addressed in version 0.11.1.

References