https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 14:32:10 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-336179 EUVD-2026-336179 https://cve.radiocsirt.org/vuln/euvd-2026-336179 https://cve.radiocsirt.org/vuln/fkie_cve-2026-59217 <p>Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, the file upload path accepted metadata.knowledge_id and auto-linked uploaded files to a target knowledge base without applying the write-access check used by /api/v1/knowledge//file/add, allowing read-only knowledge-base users to add arbitrary files. This issue is fixed in version 0.10.0.</p> <p>Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, the file upload path accepted metadata.knowledge_id and auto-linked uploaded files to a target knowledge base without applying the write-access check used by /api/v1/knowledge//file/add, allowing read-only knowledge-base users to add arbitrary files. This issue is fixed in version 0.10.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-59217 https://cve.radiocsirt.org/vuln/ghsa-7r7x-gjvr-448g <p><strong>Affected:</strong> PyPI: open-webui</p> <p># Open WebUI upload metadata can add files to knowledge bases without write permission</p> <p>## Summary</p> <p>Open WebUI&#39;s file upload background processing trusts the client-supplied `metadata.knowledge_id` value and inserts a `knowledge_file` association before validating that the uploading user has write access to the target knowledge base.</p> <p>A verified user with only read access to a knowledge base can upload an arbitrary file and set `metadata={&#34;knowledge_id&#34;:&#34;&lt;target knowledge id&gt;&#34;}`. The normal `/api/v1/knowledge/{id}/file/add` endpoint correctly requires knowledge-base write access, but the upload auto-link path bypasses that authorization check.</p> <p>The immediate result is unauthorized modification of the target knowledge base&#39;s file membership. The attached attacker-controlled file becomes visible through `/api/v1/knowledge/{id}/files`, and readers/owners of that knowledge base can retrieve the file through the normal file endpoints because file access is derived from `KnowledgeFile` membership.</p> <p>## Affected Version</p> <p>- Repository: `open-webui/open-webui` - Tested source commit: `02dc3e689ceac915a870b373318b99c029ddf603` - Package version observed in `package.json`: `0.9.6` - Package name: `open-webui`</p> <p>## Impact</p> <p>A read-only knowledge-base collaborator can perform a write operation against that knowledge base by attaching arbitrary uploaded files.</p> <p>Security impact:</p> <p>- Unauthorized knowledge-base membership modification. - Integrity impact on shared knowledge-base file listings.…</p> <p><strong>Affected:</strong> PyPI: open-webui</p> <p># Open WebUI upload metadata can add files to knowledge bases without write permission</p> <p>## Summary</p> <p>Open WebUI&#39;s file upload background processing trusts the client-supplied `metadata.knowledge_id` value and inserts a `knowledge_file` association before validating that the uploading user has write access to the target knowledge base.</p> <p>A verified user with only read access to a knowledge base can upload an arbitrary file and set `metadata={&#34;knowledge_id&#34;:&#34;&lt;target knowledge id&gt;&#34;}`. The normal `/api/v1/knowledge/{id}/file/add` endpoint correctly requires knowledge-base write access, but the upload auto-link path bypasses that authorization check.</p> <p>The immediate result is unauthorized modification of the target knowledge base&#39;s file membership. The attached attacker-controlled file becomes visible through `/api/v1/knowledge/{id}/files`, and readers/owners of that knowledge base can retrieve the file through the normal file endpoints because file access is derived from `KnowledgeFile` membership.</p> <p>## Affected Version</p> <p>- Repository: `open-webui/open-webui` - Tested source commit: `02dc3e689ceac915a870b373318b99c029ddf603` - Package version observed in `package.json`: `0.9.6` - Package name: `open-webui`</p> <p>## Impact</p> <p>A read-only knowledge-base collaborator can perform a write operation against that knowledge base by attaching arbitrary uploaded files.</p> <p>Security impact:</p> <p>- Unauthorized knowledge-base membership modification. - Integrity impact on shared knowledge-base file listings.…</p> https://cve.radiocsirt.org/vuln/ghsa-7r7x-gjvr-448g https://cve.radiocsirt.org/vuln/pysec-2026-3593 <p><strong>Affected:</strong> PyPI: open-webui</p> <p># Open WebUI upload metadata can add files to knowledge bases without write permission</p> <p>## Summary</p> <p>Open WebUI&#39;s file upload background processing trusts the client-supplied `metadata.knowledge_id` value and inserts a `knowledge_file` association before validating that the uploading user has write access to the target knowledge base.</p> <p>A verified user with only read access to a knowledge base can upload an arbitrary file and set `metadata={&#34;knowledge_id&#34;:&#34;&lt;target knowledge id&gt;&#34;}`. The normal `/api/v1/knowledge/{id}/file/add` endpoint correctly requires knowledge-base write access, but the upload auto-link path bypasses that authorization check.</p> <p>The immediate result is unauthorized modification of the target knowledge base&#39;s file membership. The attached attacker-controlled file becomes visible through `/api/v1/knowledge/{id}/files`, and readers/owners of that knowledge base can retrieve the file through the normal file endpoints because file access is derived from `KnowledgeFile` membership.</p> <p>## Affected Version</p> <p>- Repository: `open-webui/open-webui` - Tested source commit: `02dc3e689ceac915a870b373318b99c029ddf603` - Package version observed in `package.json`: `0.9.6` - Package name: `open-webui`</p> <p>## Impact</p> <p>A read-only knowledge-base collaborator can perform a write operation against that knowledge base by attaching arbitrary uploaded files.</p> <p>Security impact:</p> <p>- Unauthorized knowledge-base membership modification. - Integrity impact on shared knowledge-base file listings.…</p> <p><strong>Affected:</strong> PyPI: open-webui</p> <p># Open WebUI upload metadata can add files to knowledge bases without write permission</p> <p>## Summary</p> <p>Open WebUI&#39;s file upload background processing trusts the client-supplied `metadata.knowledge_id` value and inserts a `knowledge_file` association before validating that the uploading user has write access to the target knowledge base.</p> <p>A verified user with only read access to a knowledge base can upload an arbitrary file and set `metadata={&#34;knowledge_id&#34;:&#34;&lt;target knowledge id&gt;&#34;}`. The normal `/api/v1/knowledge/{id}/file/add` endpoint correctly requires knowledge-base write access, but the upload auto-link path bypasses that authorization check.</p> <p>The immediate result is unauthorized modification of the target knowledge base&#39;s file membership. The attached attacker-controlled file becomes visible through `/api/v1/knowledge/{id}/files`, and readers/owners of that knowledge base can retrieve the file through the normal file endpoints because file access is derived from `KnowledgeFile` membership.</p> <p>## Affected Version</p> <p>- Repository: `open-webui/open-webui` - Tested source commit: `02dc3e689ceac915a870b373318b99c029ddf603` - Package version observed in `package.json`: `0.9.6` - Package name: `open-webui`</p> <p>## Impact</p> <p>A read-only knowledge-base collaborator can perform a write operation against that knowledge base by attaching arbitrary uploaded files.</p> <p>Security impact:</p> <p>- Unauthorized knowledge-base membership modification. - Integrity impact on shared knowledge-base file listings.…</p> https://cve.radiocsirt.org/vuln/pysec-2026-3593