CVE-2026-70494 open-webui CVE debrief

Who should care

Defenders responsible for Open WebUI deployments, particularly those with collaborative environments, should assess exposure and verify access controls. They should prioritize verifying and upgrading to Open WebUI version 0.11.0 or later, reviewing access controls for shared chat folders, and monitoring for suspicious activity in collaborative environments. This includes reviewing compensating controls for exposed systems while remediation is scheduled and

Why it matters

CVE-2026-70494 highlights the importance of proper authorization checks in collaborative environments, particularly in self-hosted AI platforms like Open WebUI. Defenders should prioritize verifying and upgrading to Open WebUI version 0.11.0 or later, reviewing access controls for shared chat folders, and monitoring for suspicious activity.

• Potential data loss due to unauthorized deletion of chats and messages
• Compromised collaboration environments due to flawed authorization
• Need for verification of access controls in shared chat folders
• Potential disruption of business operations relying on Open WebUI

Technical summary

The DELETE /api/v1/folders/{id} handler in Open WebUI allowed a user with write access to a shared chat folder to permanently delete chats and messages belonging to the folder owner. The issue was caused by a flawed authorization check that accepted any inherited write grant instead of requiring ownership or administrator status. This highlights the importance of proper authorization checks in collaborative environments, particularly in self-hosted AI platforms like Open WebUI. Defenders should prioritize verifying and upgrading to Open WebUI version 0.11.0 or later, reviewing access controls for shared chat folders, and monitoring for suspicious activity.

Defensive priority

Defenders should prioritize verifying and upgrading to Open WebUI version 0.11.0 or later, and review access controls for shared chat folders.

Recommended defensive actions

• Verify and upgrade to Open WebUI version 0.11.0 or later
• Review access controls for shared chat folders
• Monitor for suspicious activity in collaborative environments
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its description, CVSS score, and affected versions. The issue was reported and fixed in Open WebUI version 0.11.0. Defenders should verify and upgrade to this version or later, review access controls for shared chat folders, and monitor for suspicious activity in collaborative environments. The CVE record was published on 2026-08-04T21:16:38.470Z and has not been modified since then.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.