CVE-2026-44570 Details
Description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.19, authorization controls surrounding the memories API were inconsistent, resulting in the ability of a standard user to delete, restore, and view the contents of other users' memories. Using a newly created non-admin user with no existing memories, it is possible to view existing memories via POST /api/v1/memories/query. Similarly, even if a non-admin user cannot modify another user's memory data via POST /api/v1/memories/{memory_id}/update, the endpoint's response improperly leaks the content of that memory if a valid memory_id is known. The DELETE /api/v1/memories/{memory_id} can also be used by any user to delete an existing memory. Deleted memories can then be restored by calling the POST /api/v1/memories/{memory_id}/update endpoint again. This vulnerability is fixed in 0.6.19.
A vulnerability exists in Open WebUI versions prior to 0.6.19, where inconsistent authorization controls in the memories API allow standard users to delete, restore, and access the contents of other users' memories. A non-admin user can exploit this by querying memories through the POST /api/v1/memories/query endpoint, even without having any memories of their own. Additionally, while non-admin users cannot directly modify another user's memory via the POST /api/v1/memories/{memory_id}/update endpoint, the response from this endpoint improperly discloses the content of the memory if the memory_id is known. Furthermore, the DELETE /api/v1/memories/{memory_id} endpoint can be used by any user to delete a memory, which can then be restored by using the POST /api/v1/memories/{memory_id}/update endpoint.
Users are advised to update Open WebUI to version 0.6.19 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 18, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/open-webui/open-webui/security/advisories/GHSA-hmjq-crxp-7rjw | CISA-ADP | ExploitVendor Advisory |
| https://github.com/open-webui/open-webui/security/advisories/GHSA-hmjq-crxp-7rjw | [email protected] | ExploitVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-639 | Authorization Bypass Through User-Controlled Key | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| openwebui open webui | < 0.6.19 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 18, 2026 | Initial Analysis | [email protected] |
| May 18, 2026 | CVE Modified | CISA-ADP |
| May 15, 2026 | New CVE Received | [email protected] |