PT-2026-41181 · Unknown · Open-Webui

Published 2026-05-10 · Updated 2026-05-16 · CVE-2026-45351

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.8.9

Description When a non-administrative user logs into the application, a web request to the '/api/models?' endpoint is initiated. The response from this request reveals the system prompts of available models configured by the administrator in the workspace, compromising the confidentiality of the application. System prompts are the underlying instructions that define a model's behavior, and their exposure can provide insights into system capabilities or be used to bypass restrictions and manipulate content.

Recommendations Update to version 0.8.9.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2026-07144

CVE-2026-45351

GHSA-JH9G-8JQW-M2QX

Affected Products

Open-Webui

References · 8

• 🔥 https://github.com/open-webui/open-webui/security/advisories/GHSA-jh9g-8jqw-m2qx · Exploit
• https://osv.dev/vulnerability/GHSA-jh9g-8jqw-m2qx · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07144 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-45351 · Security Note
• https://github.com/open-webui/open-webui · Note
• https://github.com/open-webui/open-webui/releases/tag/v0.8.9 · Note
• https://twitter.com/CVEnew/status/2055457503815586200 · Twitter Post
• https://t.me/CVEtracker/53986 · Telegram Post