What’s Vulnerable › Vulnerabilities

CVE-2026-70481: Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-08-04 · updated 2026-09-18
• Weakness: CWE-284

Description

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.0, the standard channel message update and delete handlers accepted any caller holding write access on the channel without checking that the caller wrote the message. Because write access is the same grant a member needs to post, any ordinary participant in a shared standard channel could rewrite or permanently delete another participant message, while group and direct message handlers enforced authorship. This issue is fixed in 0.11.0.

Affected products

• open-webui: from 0.5.0 before 0.11.0 — fixed in 0.11.0

How to fix

Upgrade to a fixed version: open-webui 0.11.0. Check the vendor advisory for mitigations.

References

• https://github.com/open-webui/open-webui/commit/c609ec41154fa092fa0af80d9d365de06b666286
• https://github.com/open-webui/open-webui/pull/27197
• https://github.com/open-webui/open-webui/releases/tag/v0.11.0
• https://github.com/open-webui/open-webui/security/advisories/GHSA-mj5r-jf49-m3w7

Get alerted when CVE-2026-70481 or the next vulnerability affects your stack