CVE-2026-44569 Details
Description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.19, there's an IDOR in the channels message management system that allows authenticated users to modify or delete any message within channels they have read access to. The vulnerability exists in the message update and delete endpoints, which implement channel-level authorization but completely lack message ownership validation. While the frontend correctly implements ownership checks (showing edit/delete buttons only for message owners or admins), the backend APIs bypass these protections by only validating channel access permissions without verifying that the requesting user owns the target message. This creates a client-side security control bypass where attackers can directly call the APIs to modify other users' messages. This vulnerability is fixed in 0.6.19.
A vulnerability allowing insecure direct object modification and deletion of messages has been identified in Open WebUI versions prior to 0.6.19. This issue arises within the channels message management system, where authenticated users can alter or remove any message in channels they can read. The problem lies in the message update and delete API endpoints, which enforce channel-level authorization but fail to validate message ownership. While the frontend correctly restricts edit and delete options to message owners or admins, the backend APIs only check channel access, allowing users to exploit this oversight and manipulate others' messages. This vulnerability undermines message integrity and audit trails in collaborative environments.
To address this vulnerability, implement proper message ownership validation in the update and delete API endpoints. Add checks to ensure that only message owners or admins can modify messages, and adjust the permission validation to align with the access control model used in other parts of the application.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 18, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/open-webui/open-webui/security/advisories/GHSA-jxwr-g6r6-j3fx | CISA-ADP | ExploitMitigationVendor Advisory |
| https://github.com/open-webui/open-webui/security/advisories/GHSA-jxwr-g6r6-j3fx | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-862 | Missing Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| openwebui open webui | < 0.6.19 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 19, 2026 | Initial Analysis | [email protected] |
| May 18, 2026 | CVE Modified | CISA-ADP |
| May 15, 2026 | New CVE Received | [email protected] |