CVE-2026-54014

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.6

Description A path traversal issue exists in the cache file serving endpoint '/cache/{path:path}' that allows authenticated users with the role of user or admin to read files from sibling directories outside the intended cache directory. The problem occurs in the serve cache file() function within open webui/main.py due to an incomplete containment check using startswith() that lacks a trailing path separator. This allows any path resolving to a sibling directory whose name begins with the word cache (such as cache sibling, cache backup, or cached models) to pass validation. Deep traversal and absolute paths are correctly blocked.

Recommendations Update to version 0.9.6. As a temporary workaround, restrict access to the '/cache/{path:path}' endpoint to only trusted administrative users until the update is applied.