References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

Change History

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, the sync cleanup endpoint authorized write access to the knowledge base in the URL but then acted on directory and file ids supplied in the request body without checking that those objects belonged to that knowledge base. A user with write access to one knowledge base could delete directories and remove file embeddings from another knowledge base, causing documents to drop out of retrieval results and breaking chat-with-file for targeted documents without disclosing contents. This issue is fixed in 0.11.0.

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE-639

CWE-863

https://github.com/open-webui/open-webui/commit/707efeaed7992dd9896d5928559458f228b9a539

https://github.com/open-webui/open-webui/pull/26722

https://github.com/open-webui/open-webui/releases/tag/v0.11.0

https://github.com/open-webui/open-webui/security/advisories/GHSA-jxc9-xmc4-gr23

[{"vendor":"open-webui","product":"open-webui","versions":[{"version":">= 0.9.6, < 0.11.0","status":"affected"}]}]