CVE-2024-7043: Open WebUI Arbitrary File Reading and Deletion Vulnerability
Summary
CVE-2024-7043: Open WebUI Allows Arbitrary File Reading and Deletion. Affects open-webui versions < 0.3.8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Open WebUI is an open-source web application that allows users to manage and interact with files through a user-friendly interface. It is designed to facilitate file uploads, downloads, and management for various user roles. However, a critical vulnerability has been identified in version 0.3.8, which compromises the application's access control mechanisms, exposing sensitive files to unauthorized users.
Vulnerability Detail
The vulnerability arises from improper access control in the Open WebUI application. Attackers can exploit this flaw by directly accessing the API endpoints without proper authentication checks. Specifically, they can use the GET /api/v1/files/ endpoint to list all files uploaded by users, including their IDs. Subsequently, they can retrieve any file's information using the GET /api/v1/files/{file_id} endpoint and even delete files using the DELETE /api/v1/files/{file_id} endpoint. This can lead to unauthorized access to sensitive information and potential data loss.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, restrict access to the Open WebUI application by implementing additional authentication checks or by disabling the API endpoints until the package is updated. This can be done by modifying the server configuration to limit access to trusted IP addresses or by requiring API keys for sensitive operations.
Conclusion
The Open WebUI vulnerability (CVE-2024-7043) poses a significant risk due to improper access control, allowing unauthorized file access and deletion. It is crucial for users to update to a patched version to safeguard their applications and data. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for open-webui →
FAQ
The CVSS score of this vulnerability is 8.1, indicating a high severity level.
The affected version is Open WebUI v0.3.8. Users should upgrade to a version later than this to mitigate the risk.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Check your application's status at Vulert Scanner without any signup.
Exploitation of this vulnerability can lead to unauthorized access to sensitive files and the ability to delete important data, resulting in data loss and privacy breaches.
Yes, you can implement additional authentication checks or restrict access to the API endpoints as a temporary measure until the package is updated.
Related vulnerabilities
Recent vulnerabilities recorded for open-webui.
