Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.0, the standard channel message update and delete handlers accepted any caller holding write access on the channel without checking that the caller wrote the message. Because write access is the same grant a member needs to post, any ordinary participant in a shared standard channel could rewrite or permanently delete another participant message, while group and direct message handlers enforced authorship. This issue is fixed in 0.11.0.
Published: 2026-08-04
Score: 5.4 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability allows any user who has write permission to a standard channel to edit or delete messages sent by other members. Because the message update and delete handlers do not verify authorship, an ordinary participant can replace or permanently remove another user's posts. This bypasses the proper access controls that otherwise restrict these actions to the original author, thereby compromising message integrity.

Affected Systems

Open WebUI (open-webui) deployments using releases from 0.5.0 up to but not including 0.11.0 are affected. Any self‑hosted instance of the platform running a pre‑0.11.0 version is vulnerable to this flaw.

Risk and Exploitability

The CVSS score of 5.4 signals a medium severity issue focused on message integrity. The EPSS score is not available, yet the flaw can be exploited by any channel member with write rights, which is a common scenario in many teams. The vulnerability is not listed in the CISA KEV catalog. Attackers could deface conversations or erase important content with ease, making an immediate patch highly advisable.

Generated by OpenCVE AI on August 4, 2026 at 21:29 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Open WebUI to version 0.11.0 or later, which removes the authorship check flaw.
  • Revoke or tighten write permissions on shared standard channels to limit the ability of ordinary members to edit or delete messages.
  • Enable and review audit logs to detect unauthorized message modifications or deletions after the upgrade.

Generated by OpenCVE AI on August 4, 2026 at 21:29 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-mj5r-jf49-m3w7 Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages
History

Tue, 04 Aug 2026 20:15:00 +0000

Type Values Removed Values Added
Description Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.0, the standard channel message update and delete handlers accepted any caller holding write access on the channel without checking that the caller wrote the message. Because write access is the same grant a member needs to post, any ordinary participant in a shared standard channel could rewrite or permanently delete another participant message, while group and direct message handlers enforced authorship. This issue is fixed in 0.11.0.
Title Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages
Weaknesses CWE-284
CWE-862
References
Metrics cvssV3_1

{'score': 5.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-08-04T19:45:37.332Z

Reserved: 2026-08-04T15:24:41.339Z

Link: CVE-2026-70481

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T21:30:12Z

Weaknesses