CyberRota Analysis
AI-GeneratedThe vulnerability affects Open WebUI versions prior to 0.10.0, where the authentication mechanism for real-time connections fails to properly validate revoked JSON Web Tokens (JWTs) due to a missing revocation check. This flaw could allow unauthorized access to sensitive features and data, posing a significant security risk. Organizations using affected versions, particularly those with Redis configured, should prioritize upgrading to version 0.10.0 to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 before 0.10.0 with Redis configured, Socket.IO connect, user-join, join-channels, join-note, and the terminal websocket first-message authentication used decode_token without the Redis-backed is_valid_token revocation check, allowing revoked JWTs to continue authenticating realtime connections. This issue is fixed in version 0.10.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)