PT-2026-39271 · Unknown · Open-Webui

Published 2026-05-08 · Updated 2026-05-19 · CVE-2026-44554

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.0

Description The 'POST /api/v1/retrieval/process/web' endpoint accepts a user-supplied collection name and an overwrite query parameter, which defaults to True. The system fails to perform authorization checks to verify if the calling user owns or has write access to the target collection. When overwrite is set to True, the save docs to vector db() function calls VECTOR DB CLIENT.delete collection() on the target collection before writing new content. This allows an authenticated attacker to destroy a victim's knowledge base embeddings or perform RAG (Retrieval-Augmented Generation) poisoning by replacing legitimate knowledge with attacker-controlled data, potentially leading to indirect prompt injection.

Recommendations Update to version 0.9.0.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-44554

GHSA-7R82-QHG4-6WVJ

Affected Products

Open-Webui

References · 7

• https://github.com/open-webui/open-webui/security/advisories/GHSA-7r82-qhg4-6wvj · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7r82-qhg4-6wvj · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44554 · Security Note
• https://github.com/open-webui/open-webui · Note
• https://twitter.com/CVEnew/status/2055457532080988237 · Twitter Post
• https://twitter.com/infoflowcloud/status/2055458460062359586 · Twitter Post
• https://t.me/cveNotify/163969 · Telegram Post