CVE-2026-59217 open-webui CVE debrief

Who should care

Users of Open WebUI, especially those with read-only knowledge-base access, should be aware of this vulnerability and ensure they are running version 0.10.0 or later to prevent unauthorized file uploads. Affected operators include Open WebUI administrators and users with read-only knowledge-base access. Platform impact includes potential unauthorized file uploads and data breaches.

Technical summary

The vulnerability exists in the file upload path of Open WebUI, where metadata is accepted and uploaded files are auto-linked to a target knowledge base. The write-access check used by /api/v1/knowledge//file/add is not applied, allowing read-only users to add arbitrary files. This issue has been fixed in version 0.10.0. Affected product context indicates that users of Open WebUI, especially those with read-only knowledge-base access, should be aware of this vulnerability and ensure they are running version 0.10.0 or later to prevent unauthorized file uploads.

Defensive priority

Medium priority should be given to updating Open WebUI to version 0.10.0 or later to prevent exploitation of this vulnerability. Additionally, review and restrict write-access permissions for knowledge-base users, and monitor for suspicious file uploads and unauthorized access attempts.

Recommended defensive actions

• Update Open WebUI to version 0.10.0 or later
• Review and restrict write-access permissions for knowledge-base users
• Monitor for suspicious file uploads and unauthorized access attempts
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The CVE record was published on 2026-07-09T17:17:02.613Z and was last modified on 2026-07-10T18:32:10.713Z. The NVD entry is currently Analyzed. The vulnerability details indicate that Open WebUI's file upload path accepted metadata and auto-linked uploaded files to a target knowledge base without applying the write-access check used by /api/v1/knowledge//file/add, allowing read-only knowledge-base users to add arbitrary files. This issue is fixed in version 0.10.0. Evidence limits suggest verifying affected product deployments, reviewing official advisories, and tracking exceptions.

Official resources