{"data":{"id":"783bd645-9b40-473a-a0f1-319ea4636722","title":"GHSA-h3ww-q6xx-w7x3: Open WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accounts","summary":"Open WebUI's LDAP and OAuth authentication flows determine a new user's role before inserting the user, creating a time-of-check-time-of-use race on fresh instances. Concurrent first-login requests can all observe an empty user table and all receive the admin role, while the signup handler had already been patched against this pattern. The LDAP and OAuth paths were not updated, so any user who times a first login concurrently with the legitimate first admin can gain full admin privileges, including access to user data, system configuration, API keys, and connected LLM backends.","solution":"Fixed in PR #23626 (commit 96a0b3239), first released in v0.9.0 (Apr 2026). LDAP and OAuth registration now insert the new user with DEFAULT_USER_ROLE, then check Users.get_num_users() == 1 and promote only the sole user to admin. Users on >= 0.9.0 are not affected.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-h3ww-q6xx-w7x3","publishedAt":"2026-05-14T20:28:46.000Z","cveId":"CVE-2026-45675","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["open-webui@<= 0.8.12 (fixed: 0.9.0)"],"affectedPackageNames":["open-webui"],"affectedPackageRefs":["pypi:open-webui"],"affectedVendors":[],"affectedVendorsRaw":["Open WebUI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00354,"epssCheckedAt":"2026-11-07T06:14:03.427Z","kevDateAdded":null,"advisoryAliases":["GHSA-h3ww-q6xx-w7x3"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-14T20:28:46.000Z","fixReleasedAt":"2026-04-21T08:03:01.173Z","daysToFix":-23,"fixCheckedAt":"2026-10-29T21:36:04.830Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"open-webui","fixedVersion":"0.9.0","matchedVersion":"0.9.0","fixReleasedAt":"2026-04-21T08:03:01.173Z","daysToFix":-23,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:36:04.684Z"}]}}