CVE-2026-54010

Description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI lets an authenticated user attach arbitrary file_id values to their own chat message without checking whether they own or can read those files. If the attacker then shares that chat and grants themselves read access, has_access_to_file() treats the victim file as accessible through the shared chat, and the file endpoints read or delete the victim file. This vulnerability is fixed in 0.9.6.

Traduire en français

Produits concernés

• open-webui
• Openwebui open webui

Scores CVSS

Faiblesses (CWE)

• CWE-284
• CWE-639
• CWE-862

Références

• https://github.com/open-webui/open-webui/security/advisories/GHSA-vrhc-3fr6-pc3c ExploitVendor AdvisoryMitigation
• https://github.com/open-webui/open-webui/security/advisories/GHSA-vrhc-3fr6-pc3c ExploitVendor AdvisoryMitigation

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories