CVE-2026-45345

6.5 Moyenne

Publiée le 16/05/2026 à 00:16 · Modifiée le 17/06/2026 à 12:51 · Analysée par le NVD · Source : security-advisories@github.com

Description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.5.7, a user can modify another user's model even if its visibility is set to Private. By changing the access permissions during editing, unauthorized access can be gained. This vulnerability is fixed in 0.5.7.

Traduire en français

Produits concernés

open-webui
Openwebui open webui

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.5 Moyenne	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N`

Faiblesses (CWE)

CWE-285

Références

https://github.com/open-webui/open-webui/security/advisories/GHSA-gm54-m39w-grjp ExploitVendor Advisory
https://github.com/open-webui/open-webui/security/advisories/GHSA-gm54-m39w-grjp ExploitVendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories