CVE-2026-59217 Details
Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, the file upload path accepted metadata.knowledge_id and auto-linked uploaded files to a target knowledge base without applying the write-access check used by /api/v1/knowledge//file/add, allowing read-only knowledge-base users to add arbitrary files. This issue is fixed in version 0.10.0.
A vulnerability in Open WebUI prior to version 0.10.0 allows users with read-only access to a knowledge base to upload arbitrary files and link them to the knowledge base, bypassing the required write access. This is achieved by embedding the target knowledge base ID in the upload metadata, which is processed without authorization checks. As a result, the uploaded file becomes accessible through the knowledge base's file listing, potentially leading to unauthorized content indexing and knowledge base integrity issues.
Users can update to Open WebUI version 0.10.0 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/open-webui/open-webui/security/advisories/GHSA-7r7x-gjvr-448g | CISA-ADP | ExploitMitigationVendor Advisory |
| https://github.com/open-webui/open-webui/commit/b7626f05fb92b24ab923ad81a037071ebd5623d1 | [email protected] | Patch |
| https://github.com/open-webui/open-webui/pull/26001 | [email protected] | Issue TrackingPatch |
| https://github.com/open-webui/open-webui/releases/tag/v0.10.0 | [email protected] | ProductRelease Notes |
| https://github.com/open-webui/open-webui/security/advisories/GHSA-7r7x-gjvr-448g | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-862 | Missing Authorization | [email protected] |
| CWE-863 | Incorrect Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| openwebui open webui | < 0.10.0 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 14, 2026 | CVE Modified | CISA-ADP |
| Jul 10, 2026 | Initial Analysis | [email protected] |
| Jul 9, 2026 | New CVE Received | [email protected] |