PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-54010 Openwebui CVE debrief

CVE-2026-54010 is a high-severity vulnerability in Open WebUI, a self-hosted artificial intelligence platform. Prior to version 0.9.6, an authenticated user can attach arbitrary file_id values to their chat messages without proper authorization checks. If the attacker shares the chat and grants themselves read access, the has_access_to_file() function treats the victim's file as accessible through the shared chat. This allows the attacker to read or delete the victim's file via file endpoints. The vulnerability is fixed in Open WebUI version 0.9.6. Users should upgrade to the latest version to mitigate this risk.

Vendor
Openwebui
Product
Open Webui
CVSS
HIGH 8.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-23
Original CVE updated
2026-06-25
Advisory published
2026-06-23
Advisory updated
2026-06-25

Who should care

Open WebUI users and administrators should be aware of this vulnerability. Anyone using Open WebUI versions prior to 0.9.6 is at risk. Immediate action is recommended to upgrade to the patched version.

Technical summary

CVE-2026-54010 is a high-severity vulnerability in Open WebUI, with a CVSS score of 8.3. It allows an authenticated user to access files without proper authorization by manipulating file_id values in chat messages. The vulnerability exists because Open WebUI does not correctly validate file access permissions when sharing chats. An attacker can exploit this by sharing a chat, granting themselves read access, and then accessing the victim's files through file endpoints. The vulnerability is characterized by CWE-284 (Improper Access Control), CWE-639 (Insufficient Control Flow Management), and CWE-862 (Missing Authorization).

Defensive priority

High priority should be given to upgrading Open WebUI to version 0.9.6 or later. Administrators should also review chat sharing permissions and monitor file access logs for suspicious activity.

Recommended defensive actions

  • Upgrade Open WebUI to version 0.9.6 or later immediately.
  • Review and restrict chat sharing permissions to prevent unauthorized file access.
  • Monitor file access logs for suspicious activity.
  • Implement additional access controls and authorization checks for file endpoints.
  • Educate users about the risks of sharing chats with arbitrary file_id values.

Evidence notes

The CVE-2026-54010 vulnerability was publicly disclosed on June 23, 2026, and the CVE record was last modified on June 25, 2026. The vulnerability was patched in Open WebUI version 0.9.6. The CVSS score of 8.3 indicates high severity. The vulnerability is related to CWE-284, CWE-639, and CWE-862.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-54010 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-54010

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-54010 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-54010

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.