CVE-2026-45398
Last modified
CVE-2026-45398 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, _validate_collection_access() checks the user-memory-* and file-* collection name prefixes but does not check knowledge base collections, which use raw UUIDs as collection names. EPSS estimates a 0.33% chance of exploitation in the next 30 days.
Description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, _validate_collection_access() checks the user-memory-* and file-* collection name prefixes but does not check knowledge base collections, which use raw UUIDs as collection names. Any authenticated user who knows a private knowledge base UUID can read its content through the retrieval query endpoints, even though the knowledge API correctly denies that user access. The same gap affects the retrieval write endpoints (/process/text, /process/file, /process/files/batch, /process/web, /process/youtube), allowing an attacker to inject content into or overwrite another user's knowledge base. This vulnerability is fixed in 0.9.5.
Metrics
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Openwebui | Open Webui | < 0.9.5 |
References
- https://github.com/open-webui/open-webui/pull/22109Issue Tracking, Patch
- https://github.com/open-webui/open-webui/security/advisories/GHSA-4g37-7p2c-38r9Exploit, Mitigation, Vendor Advisory
- https://github.com/open-webui/open-webui/security/advisories/GHSA-4g37-7p2c-38r9Exploit, Mitigation, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-45398?
How severe is CVE-2026-45398?
How do I fix CVE-2026-45398?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-45391A command injection vulnerability in Cribl Edge for Linux ve…8.5
- CVE-2026-45392DOM-based cross-site scripting (XSS) in Cribl Stream before …8.7
- CVE-2026-45393A vulnerability chain in Cribl Edge for Windows before 4.17.…8.5
- CVE-2026-45395Open WebUI is a self-hosted artificial intelligence platform…7.2
- CVE-2026-45396Open WebUI is a self-hosted artificial intelligence platform…5.4
- CVE-2026-45397Open WebUI is a self-hosted artificial intelligence platform…5.3
- CVE-2026-45399Open WebUI is a self-hosted artificial intelligence platform…7.1
- CVE-2026-4540A vulnerability was detected in projectworlds Online Notes S…7.3
- CVE-2026-45400Open WebUI is a self-hosted artificial intelligence platform…8.5
- CVE-2026-45401Open WebUI is a self-hosted artificial intelligence platform…8.5
- CVE-2026-45402Open WebUI is a self-hosted artificial intelligence platform…8.1
- CVE-2026-45403AnythingLLM is an application that turns pieces of content i…2.5
Are you affected by CVE-2026-45398?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST