GHSA-jgj3-r8hr-9pjw: Open WebUI's Improper Authorization in Standard Channels Allows Message Updates with Read Permission
Summary
Open WebUI has an authorization flaw in standard channels (regular channels, not group or direct message channels) where the message update endpoint incorrectly allows access with read permission only. This means any authenticated user can modify other users' messages if they know the message ID, violating data integrity (the guarantee that information stays accurate and unchanged by unauthorized parties).
Solution / Mitigation
Update the permission check in `backend/open_webui/routers/channels.py:1451–1456` by changing the authorization requirement from `has_access(..., type="read")` to `has_access(..., type="write")`, ensuring only administrators, message owners, or users with write permission (the ability to create or modify content) can update messages.
Vulnerability Details
EPSS: 0.0%
Yes
May 11, 2026
Classification
Affected Vendors
Affected Packages
Original source: https://github.com/advisories/GHSA-jgj3-r8hr-9pjw
First tracked: May 11, 2026 at 02:00 PM
Classified by LLM (prompt v3) · confidence: 85%