CVE-2026-70483
Open WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpoint
CVSS Score
3.1
EPSS Score
0.0%
EPSS Percentile
0th
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, DELETE /api/v1/chats/{id} cancelled a chat's in-flight tasks before checking whether the caller could delete that chat. Any authenticated user who knew another user's chat id could abort that user's running model response, title generation, or tag generation, even though the delete was refused and no chat data was deleted, modified, or disclosed. This issue is fixed in 0.11.0.
| CWE | CWE-862 |
| Vendor | open-webui |
| Product | open-webui |
| Published | Aug 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for open-webui open-webui
Be the first to know when new low vulnerabilities affecting open-webui open-webui are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L Attack Vector
Network
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
Low
Affected Versions
open-webui / open-webui
>= 0.9.6, < 0.11.0
References
github.com: https://github.com/open-webui/open-webui/security/advisories/GHSA-3vf6-64vr-3g56 github.com: https://github.com/open-webui/open-webui/pull/27006 github.com: https://github.com/open-webui/open-webui/commit/4f93c3e36c1734342a32c312bdb0516c66d8e93c github.com: https://github.com/open-webui/open-webui/releases/tag/v0.11.0