{"id":"CVE-2026-59714","title":"Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform","summary":"Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 before 0.10.0, any authenticated user can overwrite the content of a message in a channel they do not belong to (including private and DM ch…","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","cwe":["CWE-862"],"vendor":"open-webui","product":"open-webui","affected":["open-webui >= 0.9.5, < 0.10.0"],"patched":["open-webui 0.10.0"],"published":"2026-08-13","updated":"2026-09-18","sourceUpdated":"2026-09-18T20:09:01.757","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-59714","references":[{"url":"https://github.com/open-webui/open-webui/commit/ac3449cac91e62b08a7c28e54fcd044d14dea791","label":"security-advisories@github.com"},{"url":"https://github.com/open-webui/open-webui/pull/26385","label":"security-advisories@github.com"},{"url":"https://github.com/open-webui/open-webui/releases/tag/v0.10.0","label":"security-advisories@github.com"},{"url":"https://github.com/open-webui/open-webui/security/advisories/GHSA-x2ff-v5v8-m75m","label":"security-advisories@github.com"},{"url":"https://github.com/open-webui/open-webui/commit/33e4e0dcc43afcca80f9c635d762cdc76c768ba9"},{"url":"https://github.com/advisories/GHSA-x2ff-v5v8-m75m"}],"tags":["nvd","ghsa","pip"],"epss":0.00478,"epssPercentile":0.38552,"aliases":["GHSA-x2ff-v5v8-m75m"],"ecosystem":"pip","ingestedAt":"2026-07-24T17:34:27.263Z","slug":"CVE-2026-59714","body":"## Overview\n\nOpen WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 before 0.10.0, any authenticated user can overwrite the content of a message in a channel they do not belong to (including private and DM channels) by sending a chat completion request with a channel:-prefixed chat_id and a target message_id. The channel: path routes pipeline output through _make_channel_emitter, which writes to the Messages table using the caller-supplied message_id without binding it to the channel. This issue is fixed in version 0.10.0.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Package advisory (CVE-2026-59714)\n\nAffected packages:\n\n- `open-webui >= 0.9.5, < 0.10.0`\n\nPatched in:\n\n- `open-webui 0.10.0`\n\nSource: https://github.com/advisories/GHSA-x2ff-v5v8-m75m","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":39.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}