Authorization bypass through user-controlled key in Open WebUI - #VU140761
Published: August 3, 2026
Vulnerability details
The vulnerability allows a remote user to delete directories and remove file embeddings in other knowledge bases.
The vulnerability exists due to authorization bypass through user-controlled key in the sync_knowledge_cleanup handler when processing directory and file identifiers supplied in the request body. A remote user can send a specially crafted cleanup request to delete directories and remove file embeddings in other knowledge bases.
The issue affects the POST /api/v1/knowledge/{id}/sync/cleanup endpoint and requires write access to one knowledge base and knowledge of the target directory or file identifier; in practice this is typically reachable by a read-only collaborator on a shared knowledge base.