Description
open-webui v0.6.33 is vulnerable to Incorrect Access Control. The API /api/tasks/stop/ directly accesses and cancels tasks without verifying user ownership, enabling attackers (a normal user) to stop arbitrary LLM response tasks.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | open-webui | <= 0.6.33 | — | GHSA-frv8-gffc-37px |
| PyPI | open-webui | < 0.9.0 | 0.9.0 | PYSEC-2026-1732 |