Open WebUI: Missing permission check in files API allows authenticated users to list, access and delete…
Open WebUI
More for Open WebUI RSS feed for Open WebUI
- Severity
- High, CVSS 8.1
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- Record
- CVE-2026-45301
- Affects
- Open WebUI
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- May 15, 2026
- Source last modified
- June 17, 2026
Description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.3.16, a missing permission check in all files related API endpoints allows any authenticated user to list, access and delete every file uploaded by every user to the platform. This vulnerability is fixed in 0.3.16.
Description quoted from the NVD record.
Who is affected
Open WebUI is a chat program for working with AI that an organization installs on its own computers, and it can run entirely offline. This flaw affects versions before 0.3.16. A missing permission check in the part of the product that handles uploaded files lets anyone with an account who signs in list, open and delete every file uploaded by every user. This flaw is rated High.
What to do
- Find out who looks after Open WebUI for your organization: the person who installed and runs it, or an IT provider or vendor who manages it for you.
- If you run it yourselves, that person should check which version is installed. Any version before 0.3.16 has this flaw.
- Update Open WebUI to version
0.3.16or later, which fixes this flaw. - If an IT provider or vendor runs it for you, send them this advisory and ask when the update will be done.
Analysis written from the source record as of June 17, 2026 and reviewed before publishing.