CVE-2026-70481
Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages
CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.0, the standard channel message update and delete handlers accepted any caller holding write access on the channel without checking that the caller wrote the message. Because write access is the same grant a member needs to post, any ordinary participant in a shared standard channel could rewrite or permanently delete another participant message, while group and direct message handlers enforced authorship. This issue is fixed in 0.11.0.
| CWE | CWE-284 CWE-862 |
| Vendor | open-webui |
| Product | open-webui |
| Published | Aug 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for open-webui open-webui
Be the first to know when new medium vulnerabilities affecting open-webui open-webui are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
Low
Affected Versions
open-webui / open-webui
>= 0.5.0, < 0.11.0
References
github.com: https://github.com/open-webui/open-webui/security/advisories/GHSA-mj5r-jf49-m3w7 github.com: https://github.com/open-webui/open-webui/pull/27197 github.com: https://github.com/open-webui/open-webui/commit/c609ec41154fa092fa0af80d9d365de06b666286 github.com: https://github.com/open-webui/open-webui/releases/tag/v0.11.0