---
id: CVE-2026-70483
title: >-
  Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI
  platform
summary: >-
  Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI
  platform. From 0.9.6 until 0.11.0, DELETE /api/v1/chats/{id} cancelled a
  chat's in-flight tasks before checking whether the caller could delete that
  chat. Any au…
severity: low
cvss: 3.1
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L'
cwe:
  - CWE-862
vendor: openwebui
product: open_webui
affected:
  - 'open_webui >= 0.9.6, < 0.11.0'
patched:
  - open_webui 0.11.0
published: '2026-08-04'
updated: '2026-09-18'
sourceUpdated: '2026-09-18T14:46:24.803'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-70483'
references:
  - url: >-
      https://github.com/open-webui/open-webui/commit/4f93c3e36c1734342a32c312bdb0516c66d8e93c
    label: security-advisories@github.com
  - url: 'https://github.com/open-webui/open-webui/pull/27006'
    label: security-advisories@github.com
  - url: 'https://github.com/open-webui/open-webui/releases/tag/v0.11.0'
    label: security-advisories@github.com
  - url: >-
      https://github.com/open-webui/open-webui/security/advisories/GHSA-3vf6-64vr-3g56
    label: security-advisories@github.com
  - url: >-
      https://github.com/open-webui/open-webui/security/advisories/GHSA-3vf6-64vr-3g56
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: 'https://github.com/advisories/GHSA-3vf6-64vr-3g56'
tags:
  - nvd
  - ghsa
  - pip
epss: 0.00458
epssPercentile: 0.37177
aliases:
  - GHSA-3vf6-64vr-3g56
ecosystem: pip
ingestedAt: '2026-08-04T20:41:43.947Z'
---

## Overview

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, DELETE /api/v1/chats/{id} cancelled a chat's in-flight tasks before checking whether the caller could delete that chat. Any authenticated user who knew another user's chat id could abort that user's running model response, title generation, or tag generation, even though the delete was refused and no chat data was deleted, modified, or disclosed. This issue is fixed in 0.11.0.

## Affected

- `open_webui >= 0.9.6, < 0.11.0`

## Remediation

Upgrade past the affected range:

- `open_webui 0.11.0`

## Package advisory (CVE-2026-70483)

Affected packages:

- `open-webui >= 0.9.6, < 0.11.0`

Patched in:

- `open-webui 0.11.0`

Source: https://github.com/advisories/GHSA-3vf6-64vr-3g56