PT-2026-41179 · Unknown · Open-Webui

Published 2026-03-10 · Updated 2026-05-15 · CVE-2026-45349

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:S/C:C/I:P/A:N

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.0

Description An issue exists where a user can continue the conversation of another user if the target user's Chat ID is known. This occurs because the system fails to verify if the Chat ID matches the user who created it. An attacker can use the '/api/chat/completions' endpoint with their own API key and another user's Chat ID to access and extend private conversations, provided both users have access to the same model.

Recommendations Update to version 0.9.0 or later.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

BDU:2026-07141

CVE-2026-45349

GHSA-GFM2-XM6C-37QC

Affected Products

Open-Webui

References · 8

• 🔥 https://github.com/open-webui/open-webui/security/advisories/GHSA-gfm2-xm6c-37qc · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-45349 · Security Note
• https://osv.dev/vulnerability/GHSA-gfm2-xm6c-37qc · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07141 · Security Note
• https://github.com/open-webui/open-webui · Note
• https://github.com/open-webui/open-webui/commit/cf4218e688def6f11d195aeda6665ae5b5376b67 · Note
• https://github.com/open-webui/open-webui/releases/tag/v0.9.0 · Note
• https://t.me/CVEtracker/53952 · Telegram Post