Skip to content
OpenAdvisories

Vendor

open-webui

175 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-70481 Public exploit

    Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages

    Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.0, the standard channel message update and delete handlers accepted any caller holding write access on the channel without checking that the caller wro…