{"data":{"id":"4fb54f8e-82d4-4fdc-8335-045e4d6c3025","title":"GHSA-57q6-fvp4-pqmm: Open WebUI's API key endpoint restrictions bypassed via `x-api-key` header — full message processing on restricted endpoints","summary":"Open WebUI's Anthropic-compatible API path accepts API keys via the `x-api-key` header, but endpoint restrictions are checked only for keys sent in the `Authorization` header. A key restricted from `/api/v1/messages` returns 403 with `Authorization: Bearer sk-...`, yet the same key sent via `x-api-key` is authenticated and returns a full model response. The advisory's proof of concept was verified against Open WebUI v0.8.11, and the bypass lets any restricted key reach any endpoint.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-57q6-fvp4-pqmm","publishedAt":"2026-05-14T20:21:26.000Z","cveId":"CVE-2026-45339","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["open-webu@<= 0.8.12 (fixed: 0.9.0)"],"affectedPackageNames":["open-webu"],"affectedPackageRefs":["pypi:open-webu"],"affectedVendors":[],"affectedVendorsRaw":["Open WebUI","Anthropic-compatible API"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00438,"epssCheckedAt":"2026-10-23T12:08:27.584Z","kevDateAdded":null,"advisoryAliases":["GHSA-57q6-fvp4-pqmm"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-14T20:21:26.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}