{"data":{"id":"8a63a3a0-3f3d-42d6-9439-52724062c16e","title":"GHSA-rqj7-6wrp-6g2g: Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permission","summary":"Open WebUI's direct POST /api/v1/images/edit route checked only that the user was verified, so it skipped the global ENABLE_IMAGE_EDIT switch and the per-user features.image_generation permission that other image-editing paths enforce. Affected versions are >= 0.8.11, < 0.10.0. An authenticated non-admin user could send billable edit requests to the configured provider using administrator credentials, but no cross-user data or provider keys were exposed.","solution":"Fixed in v0.10.0. The patch splits the direct route into a thin /edit route that enforces ENABLE_IMAGE_EDIT and features.image_generation before calling the shared image_edits() implementation.","labels":["security","industry"],"sourceUrl":"https://github.com/advisories/GHSA-rqj7-6wrp-6g2g","publishedAt":"2026-07-24T16:58:48.000Z","cveId":"CVE-2026-59227","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["open-webui@>= 0.8.11, < 0.10.0 (fixed: 0.10.0)"],"affectedPackageNames":["open-webui"],"affectedPackageRefs":["pypi:open-webui"],"affectedVendors":[],"affectedVendorsRaw":["Open WebUI","gpt-image-1","OpenAI-compatible image APIs","Gemini","ComfyUI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0042,"epssCheckedAt":"2026-11-04T12:08:33.950Z","kevDateAdded":null,"advisoryAliases":["GHSA-rqj7-6wrp-6g2g"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-07-24T16:58:48.000Z","fixReleasedAt":"2026-06-29T19:24:31.831Z","daysToFix":-25,"fixCheckedAt":"2026-10-29T21:32:38.766Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability","integrity"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"open-webui","fixedVersion":"0.10.0","matchedVersion":"0.10.0","fixReleasedAt":"2026-06-29T19:24:31.831Z","daysToFix":-25,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:38.619Z"}]}}