PT-2026-39671 · Unknown · Open-Webui

Published 2026-05-11 · Updated 2026-05-16 · CVE-2026-44569

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.6.19

Description An Insecure Direct Object Reference (IDOR) exists in the channels message management system, allowing authenticated users to modify or delete any message within channels where they have read access. The issue stems from the message update and delete endpoints, which perform channel-level authorization but fail to validate message ownership. While the frontend restricts edit and delete options to owners or administrators, the backend APIs bypass these controls by only verifying channel access permissions. This allows attackers to directly call the APIs using the message id parameter to tamper with message integrity and audit trails. The affected functions include update message by id() and delete message by id(), and the affected endpoints are "/api/v1/channels/{channel id}/messages/{victim message id}/update" and "/api/v1/channels/{channel id}/messages/{victim message id}/delete".

Recommendations Update to version 0.6.19.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-44569

GHSA-JXWR-G6R6-J3FX

Affected Products

Open-Webui

References · 7

• 🔥 https://github.com/open-webui/open-webui/security/advisories/GHSA-jxwr-g6r6-j3fx · Exploit
• https://osv.dev/vulnerability/GHSA-jxwr-g6r6-j3fx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44569 · Security Note
• https://github.com/open-webui/open-webui · Note
• https://twitter.com/VulmonFeeds/status/2055492882262376698 · Twitter Post
• https://twitter.com/CVEnew/status/2055457508609720674 · Twitter Post
• https://t.me/CVEtracker/53970 · Telegram Post