GHSA-fmqh-xp37-5hr8: Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint
Summary
In Open WebUI (a chat interface tool), any member with permission to post in a channel could edit and rewrite messages from other members while keeping the original author's name attached. This happened because the chat completions endpoint (the part of the software that handles message edits) only checked if the person had write access to the channel, but never verified they actually wrote the message being edited. A separate message editing route had the correct check, so the two code paths disagreed about who could modify messages.
Solution / Mitigation
Fixed in version 0.11.1 by commit 7d392bedc (#28631). The channel branch of the chat completions handler now compares the targeted message's author against the calling user and refuses the edit when they differ, matching the check that the dedicated channel message update route already had. Upgrading to 0.11.1 fully resolves this, and no configuration change is required.
Vulnerability Details
EPSS: 0.2%
Yes
September 10, 2026
Classification
Affected Vendors
Affected Packages
Original source: https://github.com/advisories/GHSA-fmqh-xp37-5hr8
First tracked: September 10, 2026 at 02:00 PM
Classified by LLM (prompt v3) · confidence: 95%