Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI's prompt version-history endpoints authorize the prompt_id in the URL but then act on caller-supplied history IDs without verifying that the history row belongs to that prompt (history_entry.prompt_id == prompt.id). This affects /api/v1/prompts/id/{prompt_id}/history/diff, /api/v1/prompts/id/{prompt_id}/update/version, and /api/v1/prompts/id/{prompt_id}/history/{history_id}. An authenticated user with access to any prompt they control, plus a victim prompt_history.id, can read or delete another user's private prompt history. This vulnerability is fixed in 0.9.6.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-12 | 1 | General1 |
| 2026-06-23 | 1 | Disclosure1 |
Yayy 5 CVE in openwebui !!! 🔥🔥🔥 - CVE-2026-54013 (openwebui 141k⭐️) - CVE-2026-54019 (openwebui 141k⭐️) - CVE-2026-54010 (openwebui 141k⭐️) - CVE-2026-54012 (openwebui 141k⭐️) - CVE-2026-54015 (openwebui 141k⭐️)
Post summary
The post simply announces five CVEs affecting openwebui, providing only their identifiers and a generic star rating.
CVE-2026-54015 Unauthorized Access to Prompt History in Open WebUI Before 0.9.6 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-54015
Post summary
A new CVE (CVE-2026-54015) enables unauthorized access to prompt history in Open WebUI versions older than 0.9.6, but the text offers no PoC, exploit code, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openwebui | open_webui | - | - | - |