PT-2026-50593 · Unknown · Open-Webui

Johnatzeropath + 1 · Published 2026-06-17 · Updated 2026-06-23 · CVE-2026-54022

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.8.11

Description An authorization bypass exists in the ydoc:document:join Socket.IO handler. The handler only performs ownership checks when the document id variable starts with the prefix note: (colon). However, the YdocManager storage layer normalizes all document IDs by replacing colons with underscores. An attacker can bypass the authorization check by requesting a document using note <id> (underscore) instead of note:<id> (colon), allowing them to access the same underlying Yjs document. This results in the server returning the full document state and leaking the private note contents of other users.

Recommendations Update to version 0.8.11.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

CWE-706

Related Identifiers

CVE-2026-54022

GHSA-8788-J68R-3CGH

Affected Products

Open-Webui

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-54022 · Security Note
• https://osv.dev/vulnerability/GHSA-8788-j68r-3cgh · Vendor Advisory
• https://github.com/open-webui/open-webui · Note
• https://github.com/open-webui/open-webui/security/advisories/GHSA-8788-j68r-3cgh · Note