CVE-2026-44562— Open WebUI 安全漏洞
Possible ATT&CK Techniques 3AI
T1059 · Command and Scripting Interpreter T1053 · Scheduled Task/Job T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| open-webui | open-webui | < 0.9.0 | affected |
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-44562の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Open WebUI: Model Import Overwrites Any Model Without Ownership Check
ソース: NVD (National Vulnerability Database)
脆弱性説明
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the POST /api/v1/models/import endpoint allows users with the workspace.models_import permission to overwrite any existing model in the database, regardless of ownership. When an imported model's ID matches an existing model, the endpoint merges the attacker's payload over the existing model data and writes it to the database with no ownership or access grant validation. Additionally, filter_allowed_access_grants is never called, bypassing the access grant restrictions enforced on all other model mutation endpoints. This vulnerability is fixed in 0.9.0.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
授权机制缺失
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Open WebUI 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Open WebUI是Open WebUI开源的一个可扩展、功能丰富、用户友好的自托管 WebUI。 Open WebUI 0.9.0之前版本存在安全漏洞，该漏洞源于POST /api/v1/models/import端点允许具有workspace.models_import权限的用户覆盖数据库中任何现有模型（无论所有权如何），当导入模型ID与现有模型匹配时，端点将攻击者有效载荷合并到现有模型数据中并写入数据库，且未调用filter_allowed_access_grants，绕过所有其他模型突变端点强制
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| open-webui | open-webui | < 0.9.0 | - |
II. CVE-2026-44562の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-44562のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-44562 厂商安全公告 (1)
Same Patch Batch · open-webui · 2026-05-15 · 59 CVEs total
| CVE-2026-44551 | 9.1 CRITICAL | Open WebUI: LDAP Empty Password Authentication Bypass |
| CVE-2026-45672 | 8.8 HIGH | Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature g |
| CVE-2026-45315 | 8.7 HIGH | Open WebUI: Stored XSS via attacker-controlled file extension in /api/v1/audio/transcripti |
| CVE-2026-44552 | 8.7 HIGH | Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Ena |
| CVE-2026-45331 | 8.5 HIGH | Open WebUI: Full SSRF Vulnerability in the RAG Web Search Feature |
| CVE-2026-45400 | 8.5 HIGH | Open WebUI: Server-Side Request Forgery (SSRF) bypass in `validate_url` |
| CVE-2026-45401 | 8.5 HIGH | Open WebUI: SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints |
| CVE-2026-44570 | 8.3 HIGH | Open WebUI: Inconsistent authorization controls within memories API |
| CVE-2026-44565 | 8.1 HIGH | Open WebUI: Open WebUI Arbitrary File Write, Delete via Path Traversal |
| CVE-2026-45675 | 8.1 HIGH | Open WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accounts |
| CVE-2026-44553 | 8.1 HIGH | Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User No |
| CVE-2026-44554 | 8.1 HIGH | Open WebUI: Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection Overw |
| CVE-2026-45301 | 8.1 HIGH | Open WebUI: Missing permission check in files API allows authenticated users to list, acce |
| CVE-2026-45665 | 8.1 HIGH | Open WebUI: Stored XSS in Banner Component via Improper Sanitization Order |
| CVE-2026-45402 | 8.1 HIGH | Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge |
| CVE-2026-45671 | 8.0 HIGH | Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion |
| CVE-2026-45303 | 7.7 HIGH | Open WebUI: Stored XSS via the HTML renedering view |
| CVE-2026-45338 | 7.7 HIGH | Open WebUI: SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py) |
| CVE-2026-44555 | 7.6 HIGH | Open WebUI: Base Model Routing Bypasses Access Control via Model Chaining |
| CVE-2026-45398 | 7.5 HIGH | Open WebUI: IDOR - Retrieval API Bypasses Knowledge Base Access Controls |
Showing 20 of 59 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: open-webui
- CVE-2026-56399
Open WebUI - Server-Side Request Forgery via Location Redire - CVE-2026-54007
Open WebUI: Cross-origin postMessage confirmation bypass via - CVE-2026-54006
Open WebUI: Calendar event re-parenting allows writing event - CVE-2026-54008
Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_ - CVE-2026-54009
Open WebUI: Cross-user file disclosure via /api/chat/complet
同じベンダー: open-webui
- CVE-2026-56399
Open WebUI - Server-Side Request Forgery via Location Redire - CVE-2026-54007
Open WebUI: Cross-origin postMessage confirmation bypass via - CVE-2026-54006
Open WebUI: Calendar event re-parenting allows writing event - CVE-2026-54008
Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_ - CVE-2026-54009
Open WebUI: Cross-user file disclosure via /api/chat/complet
同じ弱点: CWE-862
- CVE-2026-12557
Ninja Forms - File Uploads <= 3.3.29 - Missing Authorization - CVE-2026-12729
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki - CVE-2026-59097
Taiga < 6.10.2 - Unauthorized Due-Date Creation via API View - CVE-2026-50282
Craft CMS: Unauthorized Deletion of Destination Folders Duri - CVE-2026-57760
WordPress Sendcloud Shipping plugin <= 1.0.29 - Broken Acces
V. CVE-2026-44562へのコメント
まだコメントはありません