{"data":{"id":"c2150cdb-8b95-467b-97a8-4dbb5112d5eb","title":"GHSA-3wp3-xxj9-5jqq: Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)","summary":"Open WebUI had a caching bug in its model-list endpoints where the `@cached` decorator used `key=` instead of `key_builder=`, causing all users to share a single cache entry instead of each having their own permission-filtered list. This meant one user could briefly see another user's accessible models if they made a request within the 1-second cache window after that user.","solution":"Replace `key=` with `key_builder=` at both call sites in `routers/openai.py` (line ~488) and `routers/ollama.py` (line ~302), adjusting the lambda to take the function as its first argument: `@cached(ttl=MODELS_CACHE_TTL, key_builder=lambda _func, request, user=None: (f'openai_all_models_{user.id}' if user else 'openai_all_models'),)`","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-3wp3-xxj9-5jqq","publishedAt":"2026-07-24T17:03:21.000Z","cveId":"CVE-2026-59213","cweIds":null,"cvssScore":null,"cvssSeverity":"low","severity":"low","attackType":["data_extraction"],"issueType":"vulnerability","affectedPackages":["open-webui@>= 0.6.27, < 0.10.0 (fixed: 0.10.0)"],"affectedVendors":[],"affectedVendorsRaw":["Open WebUI"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00296,"patchAvailable":true,"disclosureDate":"2026-07-24T17:03:21.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}