CVE-2026-109285

5.0Medium

Published 12 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash

5.0Medium

Attack vector: Network
Complexity: High
Privileges needed: Low
User interaction: None
Impact: Limited impact
Weakness: CWE-863

Impact

Authenticated former collaborators can download or delete files from private knowledge bases. They require network access, an authenticated account, and previously granted collaborator access to the target knowledge base.

Root cause

The has_access_to_file function fails to invalidate stale cached knowledge base references when collaborator access is revoked.

Affected systems

Open WebUI 0.6.0 before 0.11.4

CVSS v3.1 · CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Fix & remediation

Upgrade Open WebUI to version 0.11.4 or later. No interim mitigation is provided, so prioritize deploying the updated image or package.

shell

$ pip install --upgrade open-webui

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Open WebUI from 0.6.0 before 0.11.4 contains an improper access control vulnerability in has_access_to_file that lets former knowledge base collaborators keep file access via stale cached knowledge base references. Attackers with read or write grants can download removed files through the file content endpoint or delete them, including from the owner's private knowledge bases.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-109285