CVE-2026-54015

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI's prompt version-history endpoints authorize the prompt_id in the URL but then act on caller-supplied history IDs without verifying that the history row belongs to that prompt (history_entry.prompt_id == prompt.id). This affects /api/v1/prompts/id/{prompt_id}/history/diff, /api/v1/prompts/id/{prompt_id}/update/version, and /api/v1/prompts/id/{prompt_id}/history/{history_id}. An authenticated user with access to any prompt they control, plus a victim prompt_history.id, can read or delete another user's private prompt history. This vulnerability is fixed in 0.9.6.

• CWE-284
• CWE-639

• https://github.com/open-webui/open-webui/security/advisories/GHSA-4r4w-2wgp-w7cjExploit, Mitigation, Vendor Advisory
• https://github.com/open-webui/open-webui/security/advisories/GHSA-4r4w-2wgp-w7cjExploit, Mitigation, Vendor Advisory

Published

Jun 23, 2026

Last Modified

Jun 25, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5401AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to…5.5
• CVE-2026-54010Open WebUI is a self-hosted artificial intelligence platform…8.3
• CVE-2026-54011Open WebUI is a self-hosted artificial intelligence platform…5.4
• CVE-2026-54012Open WebUI is a self-hosted artificial intelligence platform…7.1
• CVE-2026-54013Open WebUI is a self-hosted artificial intelligence platform…7.6
• CVE-2026-54014Open WebUI is a self-hosted artificial intelligence platform…4.3
• CVE-2026-54016Open WebUI is a self-hosted artificial intelligence platform…4.3
• CVE-2026-54017Open WebUI is a self-hosted artificial intelligence platform…7.7
• CVE-2026-54018Open WebUI is a self-hosted artificial intelligence platform…7.7
• CVE-2026-54019Open WebUI is a self-hosted artificial intelligence platform…6.5
• CVE-2026-5402TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4…8.8
• CVE-2026-54020Open WebUI is an extensible, feature-rich, and user-friendly…6.3