GHSA-4vg5-rp28-gvjf: Open WebUI has Improper Authorization Control

Summary

Open WebUI version 0.1.105 has an improper authorization flaw (CWE-285) in which accounts with the pending role can make authenticated API calls as a user. The role check is enforced only at the client presentation layer, while the API does not validate that the user holds the user role. A pending user who signs up through POST /api/v1/auths/signup receives a valid JWT and can call the authenticated GET /ollama/api/tags endpoint to list available models.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• open-webuiPyPILLM dependency since 2024-05-20

Related items

• InfoResearchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six DaysSimilar attack · The Hacker News
• MediumAn AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.Similar attack · The Hacker News
• LowFBI arrests Saudi OpenAI employee who allegedly planted recording device in conference roomSimilar attack · CNBC Technology
• MediumVisual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)Similar attack · Embrace The Red
• LowAnthropic warns self-replicating AI could spread to your smart devicesSimilar attack · BleepingComputer