{"id":"CVE-2025-63681","aliases":["GHSA-frv8-gffc-37px","PYSEC-2026-1732"],"title":"open-webui is Vulnerable to Incorrect Access Control","summary":"open-webui is Vulnerable to Incorrect Access Control","severity":"low","vendor":"open-webui","product":"open-webui","ecosystem":"pip","affected":["open-webui <= 0.6.33"],"published":"2025-12-04","updated":"2026-07-07","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-frv8-gffc-37px","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-63681"},{"url":"https://github.com/TOAST-Research/pocs/blob/main/openwebui/arbitirary_task_stop/report.md"},{"url":"https://github.com/open-webui/open-webui"},{"url":"https://github.com/open-webui/open-webui/blob/46ae3f4f5d7d4d706041bdae4ad2d802e568712b/backend/open_webui/main.py#L1652"}],"tags":["osv","pip"],"epss":0.00283,"epssPercentile":0.18602,"ingestedAt":"2026-07-08T18:25:49.125Z","slug":"CVE-2025-63681","body":"## Overview\n\nopen-webui v0.6.33 is vulnerable to Incorrect Access Control. The API /api/tasks/stop/ directly accesses and cancels tasks without verifying user ownership, enabling attackers (a normal user) to stop arbitrary LLM response tasks.\n\n## Affected packages\n\n- `open-webui <= 0.6.33`\n\n## Remediation\n\nRefer to the advisory for the patched release.","depth":"sunlit","depthScore":14,"depthScoreParts":{"impact":13.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}