Authorization bypass through user-controlled key in Open WebUI - CVE-2026-29071
Published: April 24, 2026
Vulnerability identifier: #VU127476
CSH Severity: Low
CVSS v4: 2.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-29071
CWE-ID: CWE-639
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to disclose sensitive information.
The vulnerability exists due to improper access control in query_collection_handler in backend/open_webui/routers/retrieval.py when handling requests to /api/v1/retrieval/query/collection with user-controlled collection names. A remote user can send a specially crafted request referencing another user's collection to disclose sensitive information.
The memory exposure applies only when the Memory experimental feature is enabled.
Affected software
Open WebUI
How to mitigate CVE-2026-29071
Install security update from vendor's website.
Open WebUI - update to 0.8.6