CVE-2026-44554
HighSummary
Open WebUI is a self-hosted artificial intelligence platform that prior to version 0.9.0 did not verify user permissions for modifying data collections. The POST /api/v1/retrieval/process/web endpoint accepted parameters that could lead to unauthorized deletion of data collections.
Risk Assessment
The lack of permission checks may lead to unauthorized access and modification of data, posing a serious risk to data integrity within the organization.
Recommendation
It is recommended to upgrade to version 0.9.0 or later to mitigate this vulnerability and to implement additional user permission verification mechanisms.
Original NVD description (English source)
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the POST /api/v1/retrieval/process/web endpoint accepts a user-supplied collection_name and an overwrite query parameter (default: True). It performs no authorization check on whether the calling user owns or has write access to the target collection. When overwrite=True, save_docs_to_vector_db calls VECTOR_DB_CLIENT.delete_collection() on the target collection before writing new content. This vulnerability is fixed in 0.9.0.