Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 before 0.10.0, _verify_knowledge_file_access only checked read access while file write and delete routes later trusted object-derived access through writable model meta.knowledge entries, allowing a user with read-only knowledge file access to upgrade to file write or delete operations. This issue is fixed in version 0.10.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
🔴 Open WebUI Privilege Escalation via Inconsistent Access Controls, #CVE-2026-59212 (Critical) -DC-Jul2026-887 https://dailycve.com/open-webui-privilege-escalation-via-inconsistent-access-controls-cve-2026-59212-critical-dc-jul2026-887/
Post summary
The tweet announces a new CVE for Open WebUI with a privilege escalation flaw, but does not provide PoC, exploit tools, or mitigation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openwebui | open_webui | 0.9.6 | - | - |