CVE-2026-109287

4.3Medium

Published 12 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash

4.3Medium

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None
Impact: Limited impact
Weakness: CWE-639

Impact

Authenticated users can view unauthorized folder names, owner IDs, and knowledge base IDs of foreign directories. An attacker only needs read access to any legitimate knowledge base and a retained directory UUID.

Root cause

The knowledge base file listing API endpoint does not verify whether the provided directory_id actually belongs to the specified knowledge base.

Affected systems

Open WebUI 0.9.6 before 0.11.4

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Fix & remediation

Upgrade Open WebUI to version 0.11.4 or later. No interim mitigation is provided, so restrict untrusted user access to knowledge bases until updated.

shell

$ pip install --upgrade open-webui

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Open WebUI from 0.9.6 before 0.11.4 contains an authorization flaw where the knowledge base file listing does not verify that a supplied directory_id belongs to the requested knowledge base. Users with read access to any knowledge base can supply a retained foreign directory UUID to GET /api/v1/knowledge/{id}/files. The returned breadcrumbs expose folder names, owner user ids and knowledge base ids of that directory and all its ancestors.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-109287