CVE-2026-44571: Open WebUI: Improper Authorization in Standard Channels Allows Message Updates with Read Permission

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-05-15 · updated 2026-06-17
Weakness: CWE-862

Description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, in standard channels (i.e., channels whose channel.type is neither group nor dm), the endpoint POST /api/v1/channels/{channel_id}/messages/{message_id}/update can be accessed with read permission only. When access_control is set to None, the authorization check has_access(..., type="read") evaluates to True, allowing users who are not the message owner to update messages. As a result, unauthorized modification of other users’ messages is possible. This vulnerability is fixed in 0.8.6.

Affected products

open-webui: before 0.8.6 — fixed in 0.8.6

How to fix

Upgrade to a fixed version: open-webui 0.8.6. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-44571 or the next vulnerability affects your stack