---
id: CVE-2026-70487
title: >-
  Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI
  platform
summary: >-
  Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI
  platform. From 0.8.8 until 0.11.0, inline direct model metadata accepted
  client-supplied knowledge attachments without filtering them against the
  caller's read a…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-862
vendor: openwebui
product: open_webui
affected:
  - 'open_webui >= 0.8.8, < 0.11.0'
patched:
  - open_webui 0.11.0
published: '2026-08-04'
updated: '2026-09-18'
sourceUpdated: '2026-09-18T14:57:56.560'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-70487'
references:
  - url: >-
      https://github.com/open-webui/open-webui/commit/305880f2e2aeb2dda2f4b2a18a20bdcd558f7134
    label: security-advisories@github.com
  - url: 'https://github.com/open-webui/open-webui/releases/tag/v0.11.0'
    label: security-advisories@github.com
  - url: >-
      https://github.com/open-webui/open-webui/security/advisories/GHSA-6xhv-rxhv-pwm4
    label: security-advisories@github.com
  - url: 'https://github.com/advisories/GHSA-6xhv-rxhv-pwm4'
tags:
  - nvd
  - ghsa
  - pip
epss: 0.00253
epssPercentile: 0.17104
aliases:
  - GHSA-6xhv-rxhv-pwm4
ecosystem: pip
ingestedAt: '2026-08-04T20:41:43.765Z'
---

## Overview

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.8 until 0.11.0, inline direct model metadata accepted client-supplied knowledge attachments without filtering them against the caller's read access. Any authenticated user who knew another user's file id could have the builtin knowledge tools return indexed chunks from that file, causing a read-only cross-user confidentiality loss while leaving knowledge-base permissions and saved workspace model validation unaffected. This issue is fixed in 0.11.0.

## Affected

- `open_webui >= 0.8.8, < 0.11.0`

## Remediation

Upgrade past the affected range:

- `open_webui 0.11.0`

## Package advisory (CVE-2026-70487)

Affected packages:

- `open-webui >= 0.8.8, <= 0.10.2`

Patched in:

- `open-webui 0.11.0`

Source: https://github.com/advisories/GHSA-6xhv-rxhv-pwm4