{"data":{"id":"fdd359ff-1a08-4ec1-8437-048defa9becb","title":"CVE-2026-44556: Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the…","summary":"Open WebUI versions prior to 0.9.0 expose the /responses endpoint in the OpenAI router, which accepts any authenticated user. The endpoint forwards requests straight to upstream LLM providers without the model ownership, group membership and AccessGrants checks that generate_chat_completion enforces. Any authenticated user can therefore use any configured model by POSTing an arbitrary model ID to /api/openai/responses.","solution":"Fixed in 0.9.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-44556","publishedAt":"2026-05-15T20:16:47.097Z","cveId":"CVE-2026-44556","cweIds":["CWE-284","CWE-862"],"cvssScore":"7.1","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["open-webui@<= 0.8.12 (fixed: 0.9.0)"],"affectedPackageNames":["open-webui"],"affectedPackageRefs":["pypi:open-webui"],"affectedVendors":[],"affectedVendorsRaw":["Open WebUI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Open WebUI access control bypass in OpenAI /responses endpoint","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00306,"epssCheckedAt":"2026-11-07T00:12:15.020Z","kevDateAdded":null,"advisoryAliases":["GHSA-hp5m-24vp-vq2q"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:48:18.855Z","patchAvailable":true,"disclosureDate":"2026-05-15T20:16:47.097Z","fixReleasedAt":"2026-04-21T08:03:01.173Z","daysToFix":-24,"fixCheckedAt":"2026-10-29T21:35:54.092Z","capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"open-webui","fixedVersion":"0.9.0","matchedVersion":"0.9.0","fixReleasedAt":"2026-04-21T08:03:01.173Z","daysToFix":-24,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:35:53.940Z"}]}}