What’s Vulnerable › Vulnerabilities

CVE-2026-45351: Open WebUI: Exposure of System Prompt to Regular User [Non-Admin]

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-05-15 · updated 2026-06-17
• Weakness: CWE-200

Description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.9, when a regular user [non-admin] logs into the application, a http://IP:8080/api/models? web request is initiated by the application and in response, it reveals the system prompt of available models set by admin on models pages in workspace affecting the confidentiality of application. This vulnerability is fixed in 0.8.9.

Affected products

• open-webui: before 0.8.9 — fixed in 0.8.9

How to fix

Upgrade to a fixed version: open-webui 0.8.9. Check the vendor advisory for mitigations.

References

• https://github.com/open-webui/open-webui/security/advisories/GHSA-jh9g-8jqw-m2qx
• https://github.com/open-webui/open-webui/security/advisories/GHSA-jh9g-8jqw-m2qx

Get alerted when CVE-2026-45351 or the next vulnerability affects your stack