Securaity Browse advisories
SA-26-070 High

Open WebUI: Prior to 0.9.5, the tool update endpoint (POST /api/v1/tools/id/{id}/update) is missing the…

Open WebUI

More for Open WebUI RSS feed for Open WebUI

Severity
High, CVSS 7.2
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Record
CVE-2026-45395
Affects
Open WebUI
Known exploited
Not listed in the CISA Known Exploited Vulnerabilities catalog
Published
Record first published by the source
May 15, 2026
Source last modified
June 17, 2026

Description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the tool update endpoint (POST /api/v1/tools/id/{id}/update) is missing the workspace.tools permission check that is present on the tool create endpoint. This allows a user who has been explicitly denied tool management capabilities ( and who the administrator considers untrusted for code execution ) to replace a tool's server-side Python content and trigger execution, bypassing the intended workspace.tools security boundary. This vulnerability is fixed in 0.9.5.

Description quoted from the NVD record.

Who is affected

Open WebUI is a chat interface for AI language models that your organization runs on its own server, and it can work entirely offline. This flaw affects versions before 0.9.5. It is in the part of the product that lets users edit existing tools (add-ons that run code on the server). A signed-in user whom an administrator has deliberately blocked from managing tools can still change a tool's code and make it run on the server, getting around that restriction. The risk comes from people who have accounts but whom an administrator does not trust to run code. This flaw is rated High.

What to do

  1. The person who installed or runs Open WebUI for your organization should act on this.
  2. If an IT provider or vendor runs Open WebUI for you, send them this advisory and ask when the update will be done.
  3. Update Open WebUI to version 0.9.5 or later, which fixes this flaw.
  4. If you are not sure which version you run, ask whoever manages Open WebUI. Any version before 0.9.5 is affected.
  5. After the update, check that Open WebUI reports version 0.9.5 or later.

Analysis written from the source record as of June 17, 2026 and reviewed before publishing.

Sources

MORE ADVISORIES

See all