Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI added collection-level ACL checks, but the patch can still be bypassed when Milvus multitenancy mode is enabled. The ACL allows unknown non-KB collection names as legacy/ephemeral collections. In Milvus multitenancy mode, that user-controlled collection name becomes a resource_id and is interpolated into a Milvus expression without escaping. This is caused by an incomplete fix for CVE-2026-44560 This vulnerability is fixed in 0.9.6.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
Yayy 5 CVE in openwebui !!! 🔥🔥🔥 - CVE-2026-54013 (openwebui 141k⭐️) - CVE-2026-54019 (openwebui 141k⭐️) - CVE-2026-54010 (openwebui 141k⭐️) - CVE-2026-54012 (openwebui 141k⭐️) - CVE-2026-54015 (openwebui 141k⭐️)
Post summary
The tweet announces five new CVEs affecting openwebui, but offers no technical details, patches, or evidence of exploitation.
CVE-2026-54019 ACL Bypass and Expression Injection in Open WebUI Below 0.9.6 with Milvus Multitenancy https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-54019
Post summary
The post discloses CVE-2026-54019, detailing ACL bypass and expression injection flaws in Open WebUI below 0.9.6 when used with Milvus Multitenancy, but provides no PoC, exploit, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openwebui | open_webui | - | - | - |