PT-2026-41201 · Unknown · Open-Webui
CVE-2026-45671
·
Published
2026-03-11
·
Updated
2026-07-13
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Open WebUI versions prior to 0.9.0
Description
An authorization bypass allows any authenticated user to permanently delete files owned by other users. This occurs when a target file is referenced in any shared chat, as the
has access to file() function unconditionally grants access through its shared-chat branch without verifying the requesting user's identity or the type of operation being performed. Consequently, if a file is linked to a shared chat, it can be removed from the database, disk, and all knowledge base associations.Technical details include:
- API Endpoints: The 'DELETE /api/v1/files/{id}' endpoint is used to delete files, and 'GET /api/v1/knowledge/{id}/files' can be used to disclose file UUIDs to users with read access to a knowledge base.
- Vulnerable Parameters or Variables: The
{id}parameter in the endpoints and theaccess typevariable within the authorization logic. - Function Names: The
has access to file()function fails to properly validate permissions.
Recommendations
Update to version 0.9.0 or later.
As a temporary workaround, restrict access to the 'DELETE /api/v1/files/{id}' endpoint or limit the sharing of chats that reference sensitive files until the update is applied.
Exploit
Fix
DoS
IDOR
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Open-Webui