CyberRota Analysis
AI-GeneratedThe Open WebUI platform versions 0.10.0 to 0.11.1 are vulnerable due to insufficient access controls on chat completion APIs, allowing authenticated users to inject malicious chats into shared folders without proper write permissions. This could lead to unauthorized content being visible to users with read-only access, potentially compromising the integrity of shared information. Organizations using affected versions should prioritize updating to version 0.11.1 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /api/chat/completions and POST /api/v1/chat/completions in backend/open_webui/main.py copied a client-supplied folder_id into a new chat without applying the folder write-access check used by the dedicated chat routes. An authenticated user who knew a shared folder identifier could inject an attacker-controlled chat into a folder where the user had read-only or no write access, causing the entry to appear to authorized folder readers. This issue is fixed in version 0.11.1.