Authorization bypass through user-controlled key in Open WebUI - CVE-2026-29071
Published: April 24, 2026
Vulnerability identifier: #VU127476
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2026-29071
CWE-ID: CWE-639
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Open WebUI
Affected software:
Open WebUI
Open WebUI
Detailed vulnerability description
The vulnerability allows a remote user to disclose sensitive information.
The vulnerability exists due to improper access control in query_collection_handler in backend/open_webui/routers/retrieval.py when handling requests to /api/v1/retrieval/query/collection with user-controlled collection names. A remote user can send a specially crafted request referencing another user's collection to disclose sensitive information.
The memory exposure applies only when the Memory experimental feature is enabled.
How to mitigate CVE-2026-29071
Install security update from vendor's website.