{"data":{"id":"2204c870-46a9-414c-91b8-acce913beebf","title":"GHSA-jgj3-r8hr-9pjw: Open WebUI's Improper Authorization in Standard Channels Allows Message Updates with Read Permission","summary":"In standard channels of Open WebUI, the endpoint POST /api/v1/channels/{channel_id}/messages/{message_id}/update checks only read permission. When access_control is None, the has_access(..., type=\"read\") check passes, so any authenticated user who is not the message owner can update other users' messages. The source lists the attacker's prerequisites as an authenticated user with role user or higher, a standard channel, and the ability to obtain the target message_id.","solution":"Change the permission check in backend/open_webui/routers/channels.py:1451–1456 from has_access(..., type=\"read\") to has_access(..., type=\"write\") for standard channels, and keep the existing ownership check (message.user_id == user.id).","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-jgj3-r8hr-9pjw","publishedAt":"2026-05-11T14:05:24.000Z","cveId":"CVE-2026-44571","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["open-webui@<= 0.8.5 (fixed: 0.8.6)"],"affectedPackageNames":["open-webui"],"affectedPackageRefs":["pypi:open-webui"],"affectedVendors":[],"affectedVendorsRaw":["Open WebUI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00277,"epssCheckedAt":"2026-11-08T12:09:01.373Z","kevDateAdded":null,"advisoryAliases":["GHSA-jgj3-r8hr-9pjw"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-11T14:05:24.000Z","fixReleasedAt":"2026-03-01T21:09:40.090Z","daysToFix":-71,"fixCheckedAt":"2026-10-29T21:36:35.472Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"open-webui","fixedVersion":"0.8.6","matchedVersion":"0.8.6","fixReleasedAt":"2026-03-01T21:09:40.090Z","daysToFix":-71,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:36:35.324Z"}]}}