CVE-2026-59715 Details
Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.16 before 0.10.0, the Socket.IO server is configured with always_connect=True. The ydoc:awareness:update and ydoc:document:leave Socket.IO handlers accepted collaborative-document events without requiring an authenticated user, allowing unauthorized manipulation of document collaboration state. This issue is fixed in version 0.10.0.
A vulnerability in Open WebUI's Socket.IO server allows unauthenticated clients to manipulate collaborative document sessions. This issue affects Open WebUI versions 0.6.16 prior to 0.10.0. The vulnerability arises because the Socket.IO server accepts unauthenticated connections, and two event handlers, 'ydoc:awareness:update' and 'ydoc:document:leave', lack authentication checks. As a result, an unauthorized user can spoof awareness data, such as cursor positions and user presence, and impersonate other users by faking 'user left' events in real-time editing sessions.
Users should update to Open WebUI version 0.10.0 or later, where this vulnerability has been fixed. In version 0.10.0, the 'ydoc:awareness:update' and 'ydoc:document:leave' handlers were updated to require authentication, preventing unauthorized manipulation of document collaboration states.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 9, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/open-webui/open-webui/security/advisories/GHSA-gmfw-g93r-vg53 | CISA-ADP | ExploitMitigationVendor Advisory |
| https://github.com/open-webui/open-webui/commit/22f2fe1ffb66c993dad1e0b2b35514acaed2370e | [email protected] | Patch |
| https://github.com/open-webui/open-webui/pull/25946 | [email protected] | Issue TrackingPatch |
| https://github.com/open-webui/open-webui/releases/tag/v0.10.0 | [email protected] | ProductRelease Notes |
| https://github.com/open-webui/open-webui/security/advisories/GHSA-gmfw-g93r-vg53 | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-306 | Missing Authentication for Critical Function | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| openwebui open webui | >= 0.6.16, < 0.10.0 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 10, 2026 | Initial Analysis | [email protected] |
| Jul 9, 2026 | CVE Modified | CISA-ADP |
| Jul 9, 2026 | New CVE Received | [email protected] |