CVE-2026-59213 Details
Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 before 0.10.0, get_all_models handlers in routers/openai.py and routers/ollama.py passed a lambda to aiocache key instead of key_builder, causing permission-filtered per-user model lists to share a static cache entry and exposing one user’s model list to another caller during the TTL window. This issue is fixed in version 0.10.0.
A vulnerability in Open WebUI versions 0.6.27 prior to 0.10.0 allows for cross-user exposure of permission-filtered model lists. The issue arises in the 'get_all_models' handlers of 'routers/openai.py' and 'routers/ollama.py', where a lambda function was incorrectly passed to the aiocache 'key' parameter instead of 'key_builder'. This misconfiguration caused model lists to be cached statically, allowing one user's model list to be served to another user during the cache's time-to-live (TTL) window. The vulnerability could lead to unauthorized access to model information, including the existence and names of models restricted from the receiving user.
The vulnerability has been fixed in Open WebUI version 0.10.0. Users should update to this version. Instructions for updating can be found in the Open WebUI repository.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 9, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/open-webui/open-webui/security/advisories/GHSA-3wp3-xxj9-5jqq | CISA-ADP | ExploitMitigationVendor Advisory |
| https://github.com/open-webui/open-webui/commit/0fc630b34b2899599dabffffa012afd47599aa75 | [email protected] | Patch |
| https://github.com/open-webui/open-webui/pull/25783 | [email protected] | Issue TrackingPatch |
| https://github.com/open-webui/open-webui/releases/tag/v0.10.0 | [email protected] | ProductRelease Notes |
| https://github.com/open-webui/open-webui/security/advisories/GHSA-3wp3-xxj9-5jqq | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-524 | Use of Cache Containing Sensitive Information | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| openwebui open webui | >= 0.6.27, < 0.10.0 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 10, 2026 | Initial Analysis | [email protected] |
| Jul 9, 2026 | CVE Modified | CISA-ADP |
| Jul 9, 2026 | New CVE Received | [email protected] |