{"data":{"id":"8a63a3a0-3f3d-42d6-9439-52724062c16e","title":"GHSA-rqj7-6wrp-6g2g: Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permission","summary":"Open WebUI had a security gap where the `/api/v1/images/edit` endpoint (a path for sending image editing requests) didn't check if image editing was allowed, even though other image editing features did. This meant any logged-in user could bypass administrator controls that disabled image editing globally or for specific users, and could make billable requests to image editing services using the admin's credentials. The vulnerability affected versions 0.8.11 through 0.9.x.","solution":"The direct route was split into a thin `/edit` route that now enforces the `ENABLE_IMAGE_EDIT` control and per-user `features.image_generation` permission checks before delegating to the shared image editing implementation. Fixed in v0.10.0.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-rqj7-6wrp-6g2g","publishedAt":"2026-07-24T16:58:48.000Z","cveId":"CVE-2026-59227","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["open-webui@>= 0.8.11, < 0.10.0 (fixed: 0.10.0)"],"affectedVendors":["OpenAI"],"affectedVendorsRaw":["Open WebUI","OpenAI","Gemini","ComfyUI"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00259,"patchAvailable":true,"disclosureDate":"2026-07-24T16:58:48.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","availability"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}