https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 08:51:03 +0000 https://cve.radiocsirt.org/vuln/cve-2026-54022 <p><strong>Affected:</strong> open-webui</p> <p>Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, the ydoc:document:join Socket.IO handler checks note ownership only when the document_id starts with note: (colon). However, the YdocManager storage layer normalizes all document IDs by replacing colons with underscores (document_id.replace(&#34;:&#34;, &#34;_&#34;)). An attacker can join a document room using note_&lt;id&gt; (underscore) instead of note:&lt;id&gt; (colon), bypassing the authorization check entirely while accessing the same underlying Yjs document. The server then returns the full document state, leaking the victim&#39;s private note contents. This vulnerability is fixed in 0.8.11.</p> <p><strong>Affected:</strong> open-webui</p> <p>Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, the ydoc:document:join Socket.IO handler checks note ownership only when the document_id starts with note: (colon). However, the YdocManager storage layer normalizes all document IDs by replacing colons with underscores (document_id.replace(&#34;:&#34;, &#34;_&#34;)). An attacker can join a document room using note_&lt;id&gt; (underscore) instead of note:&lt;id&gt; (colon), bypassing the authorization check entirely while accessing the same underlying Yjs document. The server then returns the full document state, leaking the victim&#39;s private note contents. This vulnerability is fixed in 0.8.11.</p> https://cve.radiocsirt.org/vuln/cve-2026-54022