{"data":{"id":"dca77fdc-e9dc-4504-9548-a720dd4d8cec","title":"GHSA-jh9g-8jqw-m2qx: Open WebUI Exposes System Prompt to Regular User [Non-Admin]","summary":"A regular, non-admin user of Open WebUI v0.6.40 (the \"main\" branch) can see the system prompts that an admin set for models. The GET /api/models? response, which the application requests automatically at login, includes the system prompt of every available model configured on the workspace models pages. The source states the impact as exposing model instructions and enabling content manipulation of model input and output.","solution":"The web response should not reveal the system prompt and related internal or back-end model details to regular users. Only the model name and non-sensitive details should be revealed to them.","labels":["security","privacy"],"sourceUrl":"https://github.com/advisories/GHSA-jh9g-8jqw-m2qx","publishedAt":"2026-05-14T20:25:04.000Z","cveId":"CVE-2026-45351","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["open-webui@<= 0.8.8 (fixed: 0.8.9)"],"affectedPackageNames":["open-webui"],"affectedPackageRefs":["pypi:open-webui"],"affectedVendors":[],"affectedVendorsRaw":["Open WebUI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00392,"epssCheckedAt":"2026-10-23T06:09:43.242Z","kevDateAdded":null,"advisoryAliases":["GHSA-jh9g-8jqw-m2qx"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-14T20:25:04.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":null}}