CVE-2026-87017 open-webui CVE debrief

Who should care

Defenders responsible for Open WebUI instances, particularly those with multiple users or sensitive knowledge bases, should assess exposure and apply the patch. They should also review compensating controls for exposed systems, monitor for potential enumeration attempts, and track exceptions. Security teams and vulnerability management teams should prioritize verifying exposure and applying the patch to prevent potential information disclosure.

Why it matters

CVE-2026-87017 is a vulnerability in Open WebUI that allows enumeration of inaccessible knowledge bases, potentially leading to information disclosure. Defenders should prioritize verifying exposure and applying the patch.

• Enumeration of inaccessible knowledge bases, potentially leading to information disclosure.
• Potential for authenticated users to gain unauthorized access to knowledge base metadata.

Technical summary

The built-in knowledge search tool in Open WebUI passed the caller's readable knowledge identifiers through a metadata filter, but the search methods in eleven shipped vector backends ignored that filter, allowing an authenticated user to enumerate identifiers, names, and descriptions of inaccessible knowledge bases. This issue is fixed in version 0.11.1. The vulnerability affects Open WebUI versions from 0.7.0 to 0.11.1, and defenders should prioritize verifying exposure and applying the patch. The associated document text remains in separate collections.

Defensive priority

Defenders should prioritize verifying exposure and applying the patch, as the vulnerability allows enumeration of inaccessible knowledge bases.

Recommended defensive actions

• Verify exposure by checking if the Open WebUI instance is running a vulnerable version (between 0.7.0 and 0.11.1) and apply the patch by upgrading to version 0.11.1 or later.
• Restrict access to the knowledge search tool to authorized users only.
• Monitor for potential enumeration attempts of inaccessible knowledge bases.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record and NVD vulnerability detail provide information on the vulnerability, its impact, and the fixed version. The vulnerability affects Open WebUI versions from 0.7.0 to 0.11.1. Defenders should verify exposure by checking the version and apply the patch by upgrading to version 0.11.1 or later. The associated document text remains in separate collections, and defenders should be cautious of potential enumeration attempts of inaccessible knowledge bases.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.