CVE-2026-54010

Open WebUI: Forged chat-file link allows cross-user file read and deletion

State: Published
Severity: 8.3 High
Published: Jun 23, 2026
Updated: Jun 24, 2026
Reserved: Jun 11, 2026

Description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI lets an authenticated user attach arbitrary file_id values to their own chat message without checking whether they own or can read those files. If the attacker then shares that chat and grants themselves read access, has_access_to_file() treats the victim file as accessible through the shared chat, and the file endpoints read or delete the victim file. This vulnerability is fixed in 0.9.6.

Scores

CVSS	Score	Vector	Source
3.1	8.3 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L	GitHub_M

Weaknesses

CWE-284 Improper Access Control
CWE-639 Authorization Bypass Through User-Controlled Key
CWE-862 Missing Authorization

Affected Products

Product	Versions
open-webuiopen-webui	< 0.9.6Affected

References

https://github.com/open-webui/open-webui/security/advisories/GHSA-vrhc-3fr6-pc3c

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.