CVE-2026-54021 Details
Description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, several direct, index-addressed Ollama proxy routes accept a caller-supplied url_idx path parameter and use it as a raw index into the admin-configured OLLAMA_BASE_URLS list. Access control on these routes validates only whether the user may use the requested model, never which backend the request is routed to. Any authenticated user can append an arbitrary url_idx to force their request onto an Ollama backend they were never authorized to reach, including internal, higher-privilege, or explicitly admin-disabled backends. This vulnerability is fixed in 0.9.6.
A vulnerability in Open WebUI versions prior to 0.9.6 allows authenticated users to manipulate the 'url_idx' path parameter in several Ollama proxy routes. This parameter is used as a direct index into the admin-configured 'OLLAMA_BASE_URLS' list, bypassing proper access control. As a result, users can route requests to unauthorized Ollama backends, including those with higher privileges or explicitly disabled by the admin. The vulnerability arises because the application fails to validate which backend a request is sent to, only checking if the user is allowed to use the requested model.
Users can upgrade to Open WebUI version 0.9.6 or later, which includes a validation check for the 'url_idx' parameter on all affected routes. This update prevents routing to unauthorized or disabled backends.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 26, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/open-webui/open-webui/security/advisories/GHSA-9rpj-v7hf-vv2w | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-863 | Incorrect Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| openwebui open webui | < 0.9.6 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 26, 2026 | CVE Modified | CISA-ADP |
| Jun 25, 2026 | Initial Analysis | [email protected] |
| Jun 23, 2026 | New CVE Received | [email protected] |