Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base…
Open WebUI
More for Open WebUI RSS feed for Open WebUI
- Severity
- High, CVSS 7.1
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
- Record
- CVE-2026-87998
- Affects
- Open WebUI
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- September 9, 2026
- Source last modified
- September 16, 2026
Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/knowledge/{id}/delete in backend/open_webui/routers/knowledge.py authorized deletion against the knowledge base but then removed its administrator-owned external connection without a separate administrator check or a check for other dependent knowledge bases. A non-administrator with write access to one external knowledge base could delete shared instance configuration and make every other knowledge base using that connection unavailable. This issue is fixed in version 0.11.1.
Description quoted from the NVD record.
Who is affected
Open WebUI is a self-hosted chat interface that lets people in your organization use AI chat assistants through a web page. This flaw affects versions 0.10.0 up to (but not including) 0.11.1. It involves the knowledge base feature, where knowledge bases can use shared connections to outside sources that an administrator sets up. A regular user who is allowed to edit even one such knowledge base could delete it and, with it, remove the shared connection the administrator created. Every other knowledge base relying on that connection would then stop working. This flaw is rated High.
What to do
- Decide who should act. If you or someone on your staff installed and runs Open WebUI, that person should check which version is in use.
- If the version is 0.10.0 or later but older than 0.11.1, update Open WebUI to version
0.11.1, which fixes this flaw. Updating is the only fix named for this problem. - If an IT provider or vendor runs Open WebUI for your organization, send them this advisory and ask when the update to version
0.11.1will be done.
Analysis written from the source record as of September 16, 2026 and reviewed before publishing.