Incorrect authorization in Open WebUI - #VU140753
Published: August 3, 2026
Vulnerability identifier: #VU140753
CSH Severity: Medium
CVSS v4: 7.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-863
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to permanently delete another user's chats and messages within a shared folder subtree.
The vulnerability exists due to incorrect authorization in the DELETE /api/v1/folders/{id} handler in backend/open_webui/routers/folders.py when handling deletion requests for shared subfolders. A remote user can send a crafted folder deletion request to permanently delete another user's chats and messages within a shared folder subtree.
The issue is exposed only when folder sharing is enabled, and the victim has granted write access to a shared folder. The inherited write grant applies to descendant subfolders, including ones not explicitly shared with the caller.
Affected software
Open WebUI
Remediation
Install security update from vendor's website.
Open WebUI - update to 0.11.0