PT-2026-41197 · Unknown · Open-Webui

Published

2026-03-10

·

Updated

2026-05-16

·

CVE-2026-45402

CVSS v2.0

8.5

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:N
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.5
Description Multiple endpoints accept a user-supplied file id and attach the referenced file to a resource controlled by the caller, such as folder knowledge or knowledge-base contents, without verifying if the caller owns or has access to the file. This allows an authenticated user with knowledge of a file's UUID to exfiltrate private files from other users via Retrieval-Augmented Generation (RAG) or file-content paths. In some cases, this also allows the attacker to overwrite the victim's file content.
Technical details include:
  • API Endpoints: 'POST /api/v1/folders/{id}/update', 'add file to knowledge by id', and 'add files to knowledge by id batch'.
  • Vulnerable Parameters: file id and the data field within the FolderUpdateForm.
  • RAG (Retrieval-Augmented Generation): A technique used to provide an LLM with specific, external data to improve the accuracy and relevance of its responses.
Recommendations Update to version 0.9.5. As a temporary workaround, restrict access to the 'POST /api/v1/folders/{id}/update' endpoint and the knowledge-base attachment functions until the update is applied.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

BDU:2026-07138
CVE-2026-45402
GHSA-R472-MW7M-967F

Affected Products

Open-Webui