CVE-2026-70488 Details

A vulnerability in Open WebUI allows users with write access to one knowledge base to delete directories and file embeddings from another knowledge base. This issue affects versions 0.9.6 through 0.10.2. The vulnerability arises because the sync cleanup endpoint authorized write access to the knowledge base in the URL but then acted on directory and file IDs supplied in the request body without verifying that those objects belonged to the same knowledge base. As a result, an attacker could delete directories and remove file embeddings from a knowledge base they did not control, causing documents to disappear from retrieval results and disrupting the 'chat-with-file' feature for those documents, all without disclosing any contents.

Users are advised to update to Open WebUI version 0.11.0 or later, where this vulnerability has been fixed.