Skip to content
OpenAdvisories
Low · 3.5 Public exploit CVE-2026-45316 EUVD-2026-30660GHSA-jx2x-j75f-xq3jPYSEC-2026-2745

Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access)

Published May 15, 2026 · Updated May 18, 2026 · Assigned by GitHub_M

Vendor: open-webui Product: open-webui Package: open-webui Ecosystem: PyPI

Description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the POST /api/v1/notes/{id}/pin endpoint performs a write operation (toggling the is_pinned field) but only checks for read permission. Users with read-only access to a shared note can pin/unpin it, which is a state-modifying action that should require write permission. This vulnerability is fixed in 0.9.3.

Affected products

VendorProductAffectedFixed
open-webui open-webui < 0.9.3 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • arian-gogani/enforcement-coverage ★ 1 · Aug 23, 2026

    Finds API routes carrying weaker authorization than their siblings. Recovered CVE-2026-45316 from source. Includes the negative results.

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI open-webui < 0.9.3 0.9.3 GHSA-jx2x-j75f-xq3j

References