Back to overview

CVE-2026-54022

MEDIUM
5.3
CVSS 3.1
Description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, the ydoc:document:join Socket.IO handler checks note ownership only when the document_id starts with note: (colon). However, the YdocManager storage layer normalizes all document IDs by replacing colons with underscores (document_id.replace(":", "_")). An attacker can join a document room using note_<id> (underscore) instead of note:<id> (colon), bypassing the authorization check entirely while accessing the same underlying Yjs document. The server then returns the full document state, leaking the victim's private note contents. This vulnerability is fixed in 0.8.11.

Metadata

CVE ID
CVE-2026-54022
State
PUBLISHED
Assigner
GitHub_M
Reserved
2026-06-11 16:34 UTC
Published
2026-06-23 16:38 UTC
Last updated
2026-06-23 16:38 UTC
Primary CWE
CWE-706
CWE-706: Use of Incorrectly-Resolved Name or Reference
Vendor / Product
open-webui / open-webui
Sources
cve.org  ·  NVD

Severity & Metrics

5.3 MEDIUM CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products (1)
VendorProductPlatformVersions
open-webui open-webui — < 0.8.11
Weakness (CWE)
CWESourceDescription
CWE-706 cna CWE-706: Use of Incorrectly-Resolved Name or Reference
CWE-863 cna CWE-863: Incorrect Authorization
CVSS scores (1)
ScoreSeverityVersionSourceVector
5.3 MEDIUM 3.1 cna CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
References (1)
Back to overview