{"data":{"id":"eb9f38c3-8f4e-4e1c-baac-e5da4542d27a","title":"CVE-2026-54019: Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open…","summary":"Open WebUI versions prior to 0.9.6 can have their collection-level ACL checks bypassed when Milvus multitenancy mode is enabled. The ACL treats unknown non-KB collection names as legacy or ephemeral collections, so a user-controlled collection name becomes a resource_id that is interpolated without escaping into a Milvus expression. The flaw is caused by an incomplete fix for CVE-2026-44560.","solution":"Fixed in 0.9.6.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-54019","publishedAt":"2026-06-23T18:18:07.230Z","cveId":"CVE-2026-54019","cweIds":["CWE-862","CWE-943"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["open-webui@<= 0.9.5 (fixed: 0.9.6)"],"affectedPackageNames":["open-webui"],"affectedPackageRefs":["pypi:open-webui"],"affectedVendors":[],"affectedVendorsRaw":["Open WebUI","Milvus"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Open WebUI collection ACL bypass through Milvus multitenancy expression","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00386,"epssCheckedAt":"2026-11-09T12:10:43.918Z","kevDateAdded":null,"advisoryAliases":["GHSA-p5cp-r7rg-qpxc"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:47:34.544Z","patchAvailable":true,"disclosureDate":"2026-06-23T18:18:07.230Z","fixReleasedAt":"2026-06-01T22:03:27.641Z","daysToFix":-22,"fixCheckedAt":"2026-10-29T21:33:55.764Z","capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"rag","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"open-webui","fixedVersion":"0.9.6","matchedVersion":"0.9.6","fixReleasedAt":"2026-06-01T22:03:27.641Z","daysToFix":-22,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:33:55.589Z"}]}}