CVE-2026-59212 open-webui CVE debrief

Who should care

Users of Open WebUI, especially those with read-only knowledge file access, should be aware of this security issue and upgrade to version 0.10.0 to prevent potential unauthorized file modifications. Affected operator, platform, vulnerability-management, and security-team impact should be reviewed.

Technical summary

The _verify_knowledge_file_access function in Open WebUI only checked read access, but file write and delete routes trusted object-derived access through writable model meta.knowledge entries. This allowed users with read-only knowledge file access to gain write or delete capabilities. The vulnerability is fixed in version 0.10.0. Affected product deployments should be reviewed for exposure, and compensating controls should be considered while remediation is scheduled.

Defensive priority

Medium priority due to the potential for unauthorized file modifications. Review compensating controls for exposed systems while remediation is scheduled and verified.

Recommended defensive actions

• Upgrade to Open WebUI version 0.10.0 or later
• Review and restrict file access permissions for users with read-only knowledge file access
• Monitor for suspicious file modifications
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record was published on 2026-07-09T17:17:01.903Z and was last modified on 2026-07-10T19:59:36.867Z. The NVD entry is currently Analyzed. The issue is related to Open WebUI, an extensible and feature-rich self-hosted AI platform. The vulnerability allows users with read-only knowledge file access to upgrade to file write or delete operations. Evidence is limited, and defenders should verify affected scope and vendor guidance.

Official resources