CVE-2026-70483 Details

A vulnerability in Open WebUI versions 0.9.6 prior to 0.11.0 allows any authenticated user to cancel another user's chat tasks through the chat delete API endpoint. The issue arises because the deletion process cancels ongoing tasks before verifying if the caller has the right to delete the chat. As a result, an authenticated user with knowledge of another user's chat ID could disrupt that user's active model response, title generation, or tag generation. Although the deletion request would be denied and no chat data would be lost or altered, the interruption of in-progress tasks could be exploited repeatedly as long as the chat ID remained valid.

Users can upgrade to Open WebUI version 0.11.0, where this vulnerability has been fixed. The updated version ensures that authorization checks are performed before cancelling any chat tasks, preventing unauthorized interruptions.