Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the POST /api/v1/notes/{id}/pin endpoint performs a write operation (toggling the is_pinned field) but only checks for read permission. Users with read-only access to a shared note can pin/unpin it, which is a state-modifying action that should require write permission. This vulnerability is fixed in 0.9.3.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-45316 Privilege Escalation in Open WebUI Prior to 0.9.3 via Insufficient Permission Checks https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-45316
Post summary
The entry announces a privilege‑escalation flaw in Open WebUI before version 0.9.3 due to insufficient permission checks, with no PoC, exploit, patch, or active exploitation mentioned.
CVE-2026-45316 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the POST /api/v1/notes/{id}/pin endpoint performs a… https://www.cve.org/CVERecord?id=CVE-2026-45316
Post summary
The message announces a vulnerability in Open WebUI’s pin endpoint before version 0.9.3, but does not provide PoC, exploit code, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openwebui | open_webui | - | - | - |