PT-2026-41191 · Unknown · Open-Webui

Published 2026-05-10 · Updated 2026-05-19 · CVE-2026-45396

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.5

Description An authenticated attacker can perform mass assignment via the 'POST /api/v1/evaluations/feedback' endpoint. This is possible because the FeedbackForm uses a configuration that allows extra fields, and the insert new feedback() function employs an insecure dictionary merge order where user-supplied data overwrites server-derived values. By injecting a user id variable in the request body, an attacker can create feedback records attributed to any arbitrary user. This leads to identity spoofing and the corruption of the model evaluation leaderboard (Elo ratings), which are rankings based on user feedback.

Recommendations Update to version 0.9.5. As a temporary workaround, restrict access to the 'POST /api/v1/evaluations/feedback' endpoint to trusted users only.

Exploit

Fix

Weakness Enumeration

CWE-915

Related Identifiers

BDU:2026-07452

CVE-2026-45396

GHSA-RJMP-VJF2-QF4G

Affected Products

Open-Webui

References · 10

• 🔥 https://github.com/open-webui/open-webui/security/advisories/GHSA-rjmp-vjf2-qf4g · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-45396 · Security Note
• https://bdu.fstec.ru/vul/2026-07452 · Security Note
• https://osv.dev/vulnerability/GHSA-rjmp-vjf2-qf4g · Vendor Advisory
• https://github.com/open-webui/open-webui/releases/tag/v0.9.5 · Note
• https://github.com/open-webui/open-webui · Note
• https://twitter.com/CVEnew/status/2055457521716830602 · Twitter Post
• https://t.me/CVEtracker/53959 · Telegram Post
• https://t.me/cveNotify/163700 · Telegram Post
• https://t.me/cveNotify/164001 · Telegram Post