The vulnerability allows an authenticated user to delete a chat via /api/v1/chats/{id}. The delete operation cancels any in‑flight tasks before verifying that the caller has permission to delete that chat. Consequently, the attacker can abort another user's running model response, title generation, or tag generation, though no chat data is removed, modified, or disclosed. This results in a denial‑of‑service‑style interruption for the targeted user.

Open WebUI – the open‑webui open-webui platform. Versions from 0.9.6 up to and including 0.10.x are affected; the issue is fixed starting with 0.11.0.

The CVSS base score of 3.1 indicates low impact. Exploitation requires authenticated access and knowledge of the target’s chat ID, which may be obtainable by enumerating or guessing. Because the flaw merely aborts an in‑flight user request and does not expose or alter data, the risk of data breach or code execution is nil. The vulnerability is not listed in CISA’s KEV catalog and no EPSS score is available, suggesting a modest likelihood of exploitation in real‑world deployments.