{"data":{"id":"78fc15c1-2b8e-404a-af59-aeab42de5617","title":"GHSA-fmqh-xp37-5hr8: Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint","summary":"In Open WebUI (a chat interface tool), any member with permission to post in a channel could edit and rewrite messages from other members while keeping the original author's name attached. This happened because the chat completions endpoint (the part of the software that handles message edits) only checked if the person had write access to the channel, but never verified they actually wrote the message being edited. A separate message editing route had the correct check, so the two code paths disagreed about who could modify messages.","solution":"Fixed in version 0.11.1 by commit 7d392bedc (#28631). The channel branch of the chat completions handler now compares the targeted message's author against the calling user and refuses the edit when they differ, matching the check that the dedicated channel message update route already had. Upgrading to 0.11.1 fully resolves this, and no configuration change is required.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-fmqh-xp37-5hr8","publishedAt":"2026-09-10T15:10:29.000Z","cveId":"CVE-2026-87994","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":[],"issueType":"vulnerability","affectedPackages":["open-webui@>= 0.9.5, < 0.11.1 (fixed: 0.11.1)"],"affectedVendors":[],"affectedVendorsRaw":["Open WebUI"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00213,"patchAvailable":true,"disclosureDate":"2026-09-10T15:10:29.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}