---
id: CVE-2026-109285
title: >-
  Open WebUI from 0.6.0 before 0.11.4 contains an improper access control
  vulnerability in has_access_to_file that lets former knowledge base
  collaborators keep file access via stale cached knowledge base references
summary: >-
  Open WebUI from 0.6.0 before 0.11.4 contains an improper access control
  vulnerability in has_access_to_file that lets former knowledge base
  collaborators keep file access via stale cached knowledge base references.
  Attackers with read or…
severity: medium
cvss: 5
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L'
cwe:
  - CWE-863
published: '2026-10-12'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T17:17:21.463'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-109285'
references:
  - url: >-
      https://github.com/open-webui/open-webui/security/advisories/GHSA-9cxp-636w-4997
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/open-webui-0.6.0-before-0.11.4-improper-access-control-via-stale-file-metadata
    label: disclosure@vulncheck.com
tags:
  - nvd
ingestedAt: '2026-10-12T18:00:08.188Z'
---

## Overview

Open WebUI from 0.6.0 before 0.11.4 contains an improper access control vulnerability in has_access_to_file that lets former knowledge base collaborators keep file access via stale cached knowledge base references. Attackers with read or write grants can download removed files through the file content endpoint or delete them, including from the owner's private knowledge bases.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.