CVE-2026-45399
Last modified
CVE-2026-45399 is a high-severity vulnerability rated 7.1/10 on the CVSS scale. Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, any authenticated user with low privileges can enumerate active background tasks across the system and stop tasks belonging to other users via the GET /api/tasks and POST /api/tasks/stop/{task_id} methods. EPSS estimates a 0.27% chance of exploitation in the next 30 days.
Description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, any authenticated user with low privileges can enumerate active background tasks across the system and stop tasks belonging to other users via the GET /api/tasks and POST /api/tasks/stop/{task_id} methods. This allows a casual user to disrupt system-wide chat usage by continuously canceling other users' active tasks. This is a real authorization vulnerability affecting integrity and usability in multi-user deployments. This vulnerability is fixed in 0.9.0.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Openwebui | Open Webui | < 0.9.0 |
References
- https://github.com/open-webui/open-webui/security/advisories/GHSA-8jjp-r2w2-4v22Exploit, Mitigation, Vendor Advisory
- https://github.com/open-webui/open-webui/security/advisories/GHSA-8jjp-r2w2-4v22Exploit, Mitigation, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-45399?
How severe is CVE-2026-45399?
How do I fix CVE-2026-45399?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-45392DOM-based cross-site scripting (XSS) in Cribl Stream before …8.7
- CVE-2026-45393A vulnerability chain in Cribl Edge for Windows before 4.17.…8.5
- CVE-2026-45395Open WebUI is a self-hosted artificial intelligence platform…7.2
- CVE-2026-45396Open WebUI is a self-hosted artificial intelligence platform…5.4
- CVE-2026-45397Open WebUI is a self-hosted artificial intelligence platform…5.3
- CVE-2026-45398Open WebUI is a self-hosted artificial intelligence platform…7.5
- CVE-2026-4540A vulnerability was detected in projectworlds Online Notes S…7.3
- CVE-2026-45400Open WebUI is a self-hosted artificial intelligence platform…8.5
- CVE-2026-45401Open WebUI is a self-hosted artificial intelligence platform…8.5
- CVE-2026-45402Open WebUI is a self-hosted artificial intelligence platform…8.1
- CVE-2026-45403AnythingLLM is an application that turns pieces of content i…2.5
- CVE-2026-45405Dokku is a docker-powered PaaS. Prior to 0.38.2, the git:fro…8.8
Are you affected by CVE-2026-45399?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST