CVE-2026-44571 — Open WebUI: Improper Authorization in Standard Channels Allows Message Updates with Read Permission

2026-10-18T12:20:13.410521+00:00

Affected: open-webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, in standard channels (i.e., channels whose channel.type is neither group nor dm), the endpoint POST /api/v1/channels/{channel_id}/messages/{message_id}/update can be accessed with read permission only. When access_control is set to None, the authorization check has_access(..., type="read") evaluates to True, allowing users who are not the message owner to update messages. As a result, unauthorized modification of other users’ messages is possible. This vulnerability is fixed in 0.8.6.

GHSA-jgj3-r8hr-9pjw — Open WebUI's Improper Authorization in Standard Channels Allows Message Updates with Read Permission

2026-10-18T12:20:13.410640+00:00

Affected: PyPI: open-webui

## Vulnerability Description

In standard channels (i.e., channels whose `channel.type` is neither `group` nor `dm`), the endpoint

`POST /api/v1/channels/{channel_id}/messages/{message_id}/update` can be accessed with **read permission only**.

When `access_control` is set to `None`, the authorization check `has_access(..., type="read")` evaluates to `True`, allowing users who are **not the message owner** to update messages.

As a result, unauthorized modification of other users’ messages is possible.

---

## Attack Prerequisites

- The attacker is an authenticated user (role `user` or higher) - The target channel is a standard channel (i.e., not `group` or `dm`) - `access_control` is `None` or allows `read` access - The attacker can obtain the target `message_id` (e.g., via the channel’s message list)

## Attack Scenario

1. The attacker (User B) retrieves another user’s `message_id` from the message list in a standard channel 2. The attacker sends a request to `POST /api/v1/channels/{channel_id}/messages/{message_id}/update` 3. The message authored by another user (User A) is successfully updated

## Potential Impact

- Unauthorized modification of other users’ messages (violation of data integrity)

# Steps to Reproduce

1. Log in as an administrator

2. Create User A

Most recent entries from all

CVE-2026-44571 — Open WebUI: Improper Authorization in Standard Channels Allows Message Updates with Read Permission

GHSA-jgj3-r8hr-9pjw — Open WebUI's Improper Authorization in Standard Channels Allows Message Updates with Read Permission