CVE-2026-44569: Open WebUI IDOR Vulnerability Allows Unauthorized Message Modification and Deletion
Summary
CVE-2026-44569: Open WebUI's Insecure Message Access Breaks Authorization. Affects open-webui versions < 0.6.19. Fixed in 0.6.19. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Open WebUI is a collaborative platform that facilitates communication and interaction among users through channels. It allows users to post messages, share information, and manage content within these channels. The platform is designed with various access controls to ensure that users can only interact with content they are authorized to access. However, a significant vulnerability has been identified that compromises the integrity of message management within these channels.
Vulnerability Detail
The vulnerability arises from an Insecure Direct Object Reference (IDOR) in the message management system of Open WebUI. Authenticated users can exploit this flaw to modify or delete messages that they do not own, provided they have read access to the channel. The backend APIs fail to validate message ownership, only checking channel access permissions. This oversight allows attackers to bypass frontend controls and directly manipulate messages, leading to potential tampering of content and disruption of audit trails.
How To Fix
Latest published version: 0.12.3 as of 22 Oct 2026
pip install --upgrade "open-webui==0.12.3"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.6.19
This is the first release that contains the fix.
pip install --upgrade "open-webui==0.6.19"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, restrict access to the message update and delete endpoints by implementing additional checks in the API layer. For example, modify the API logic to include ownership validation before allowing any modifications or deletions. This can be done by adding the following condition in the relevant API handlers:
if user.role != 'admin' and message.user_id != user.id: raise HTTPException(status_code=403, detail='Forbidden: You do not own this message.')
Conclusion
The CVE-2026-44569 vulnerability in Open WebUI poses a significant risk by allowing unauthorized message modifications and deletions. It is crucial for users to update to the patched version to mitigate this risk and ensure the integrity of their collaborative environments.
See every vulnerability recorded for open-webui →
FAQ
CVE-2026-44569 is a vulnerability in Open WebUI that allows authenticated users to modify or delete messages they do not own due to a lack of proper ownership validation.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which monitors open-source vulnerabilities without requiring any signup.
The vulnerability allows unauthorized users to alter or delete messages, compromising the integrity of communication and audit trails within collaborative channels.
Yes, the vulnerability has been patched in version 0.6.19 of Open WebUI. It is recommended to update to this version or later.
The CVSS score of this vulnerability is 7.1, indicating a high severity level.
Related vulnerabilities
Recent vulnerabilities recorded for open-webui.
