Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI lets an authenticated user attach arbitrary file_id values to their own chat message without checking whether they own or can read those files. If the attacker then shares that chat and grants themselves read access, has_access_to_file() treats the victim file as accessible through the shared chat, and the file endpoints read or delete the victim file. This vulnerability is fixed in 0.9.6.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-12 | 1 | General1 |
| 2026-06-23 | 1 | Disclosure1 |
Yayy 5 CVE in openwebui !!! 🔥🔥🔥 - CVE-2026-54013 (openwebui 141k⭐️) - CVE-2026-54019 (openwebui 141k⭐️) - CVE-2026-54010 (openwebui 141k⭐️) - CVE-2026-54012 (openwebui 141k⭐️) - CVE-2026-54015 (openwebui 141k⭐️)
Post summary
The tweet simply announces five CVE identifiers associated with openwebui without any additional technical details or context.
CVE-2026-54010 Unauthorized File Access in Open WebUI Before 0.9.6 via Arbitrary File Attachment https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-54010
Post summary
A new CVE (2026-54010) is disclosed, describing unauthorized file access in Open WebUI versions before 0.9.6 through arbitrary file attachment; no exploit, patch, or active exploitation details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openwebui | open_webui | - | - | - |