CVE-2026-54016: Open WebUI BOLA Vulnerability Allows Unauthorized Knowledge Base File Enumeration
Summary
CVE-2026-54016: Open WebUI BOLA: search_knowledge_files Allows Unauthorized Knowledge Base File Enumeration. Affects open-webui versions < 0.9.6. Fixed in 0.9.6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Open WebUI is an open-source web application that provides a user interface for managing knowledge bases and related files. It allows users to create, upload, and manage documents in a collaborative environment. However, it has been identified to have a Broken Object Level Authorization (BOLA) vulnerability in its search_knowledge_files tool, which can lead to unauthorized access to sensitive information.
Vulnerability Detail
The vulnerability arises from a lack of proper authorization checks in the search_knowledge_files function. When an authenticated user calls this function with a valid knowledge_id, the application does not verify if the user has the necessary permissions to access the specified knowledge base. This oversight allows attackers to enumerate files from private or restricted knowledge bases, potentially exposing sensitive information such as financial reports, employee documents, and customer contracts. The issue is particularly concerning as it bypasses the intended access control mechanisms, leading to unauthorized data exposure.
How To Fix
Latest published version: 0.12.3 as of 22 Oct 2026
pip install --upgrade "open-webui==0.12.3"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.9.6
This is the first release that contains the fix.
pip install --upgrade "open-webui==0.9.6"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, restrict access to the search_knowledge_files function or disable native function calling until the patch is applied. This can help prevent unauthorized users from exploiting the vulnerability while waiting for an official fix.
Conclusion
The CVE-2026-54016 vulnerability in Open WebUI poses a serious risk by allowing unauthorized file enumeration from knowledge bases. It is crucial to update to the patched version to ensure proper authorization checks are in place and to protect sensitive information from unauthorized access.
See every vulnerability recorded for open-webui →
FAQ
CVE-2026-54016 is a vulnerability in Open WebUI that allows authenticated users to enumerate files from private or restricted knowledge bases without proper authorization.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor for open-source vulnerabilities without requiring signup.
The vulnerability can lead to unauthorized access to sensitive information, including financial documents and internal project files, posing a significant risk to data privacy.
Update the Open WebUI package to version 0.9.6 or later using the command pip install open-webui --upgrade to apply the necessary security patches.
As a temporary measure, restrict access to the search_knowledge_files function or disable native function calling to mitigate the risk until you can apply the update.
Related vulnerabilities
Recent vulnerabilities recorded for open-webui.
