AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

GHSA-gmfw-g93r-vg53: Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave)

lowvulnerability

security

Source: GitHub Advisory DatabaseJuly 24, 2026CVE-2026-59715

Summary

Open WebUI's Socket.IO server accepts unauthenticated WebSocket connections and has two collaborative document handlers (`ydoc:awareness:update` and `ydoc:document:leave`) that lack authentication checks. This allows an attacker without login credentials to spoof user presence, fake cursor positions, and broadcast false events to legitimate users editing documents together.

Solution / Mitigation

The source suggests three fixes: (1) Set `always_connect=False` or reject unauthenticated connections in the `connect` handler, (2) Add `SESSION_POOL` checks to `ydoc:awareness:update` and `ydoc:document:leave` (similar to how other Ydoc handlers like `ydoc:document:join` correctly verify membership), and (3) Add room membership verification before broadcasting to document rooms.