PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-54014 open-webui CVE debrief

CVE-2026-54014 is a path traversal vulnerability in Open WebUI's cache file serving endpoint. The vulnerability allows any authenticated user to read files from sibling directories outside the intended cache directory. This is achieved by exploiting an incomplete startswith containment check that lacks a trailing path separator. The root cause lies in the serve_cache_file() function in open_webui/main.py, which validates the resolved path with file_path.startswith(os.path.abspath(CACHE_DIR)) without appending os.sep. This allows any path resolving to a sibling directory whose name begins with 'cache' (e.g., cache_sibling, cache_backup, cached_models) to pass validation. The vulnerability is fixed in version 0.9.6.

Vendor
open-webui
Product
Unknown
CVSS
MEDIUM 4.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-23
Original CVE updated
2026-06-25
Advisory published
2026-06-23
Advisory updated
2026-06-25

Who should care

Users of Open WebUI, especially those hosting it themselves, should be aware of this vulnerability. If an attacker gains authenticated access to the platform, they could potentially read sensitive files from sibling directories. This could lead to information disclosure and potentially aid in further exploitation. Therefore, users should prioritize upgrading to version 0.9.6 or applying appropriate mitigations.

Technical summary

The vulnerability exists in the cache file serving endpoint of Open WebUI. An authenticated user can exploit an incomplete path validation check to access files outside the intended cache directory. The validation check in serve_cache_file() uses file_path.startswith(os.path.abspath(CACHE_DIR)) without appending a path separator, allowing paths in sibling directories starting with 'cache' to pass validation. This issue is addressed in version 0.9.6.

Defensive priority

Medium priority should be given to patching or mitigating this vulnerability. While it requires authenticated access, the potential for information disclosure and aiding further exploitation exists.

Recommended defensive actions

  • Upgrade Open WebUI to version 0.9.6 or later.
  • Implement additional access controls and monitoring for authenticated users.
  • Review and restrict access to sensitive directories and files.
  • Consider applying compensating controls such as Web Application Firewalls (WAFs).
  • Monitor for any suspicious activity related to file access.

Evidence notes

The CVE and NVD provide details on the vulnerability. The CVE record and NVD detail pages offer information on the affected versions and potential impacts. A vendor advisory is available on GitHub, detailing the mitigation and fix in version 0.9.6.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-54014 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-54014

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-54014 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-54014

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.