Vulners
Lucene search
CVE-2026-45671
๐๏ธย 15 May 2026ย 19:13:42Reported byย GitHub_MTypeย 
ย cve๐ย web.nvd.nist.gov๐ย 7ย Views๐ WEB
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | CVE-2026-45671 | 15 May 202619:13 | โ | attackerkb |
 | CVE-2026-45671 | 11 May 202619:46 | โ | circl |
 | Open WebUI ๅฎๅ จๆผๆด | 15 May 202600:00 | โ | cnnvd |
 | CVE-2026-45671 Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion | 15 May 202619:13 | โ | cvelist |
 | EUVD-2026-30606 | 15 May 202619:13 | โ | euvd |
 | Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion | 14 May 202620:28 | โ | github |
 | CVE-2026-45671 | 15 May 202620:16 | โ | nvd |
 | GHSA-26G9-27VM-X3Q8 Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion | 14 May 202620:28 | โ | osv |
 | PT-2026-41201 | 14 May 202600:00 | โ | ptsecurity |
 | CVE-2026-45671 | 19 May 202607:57 | โ | redhatcve |
10
Node
[
{
"vendor": "open-webui",
"product": "open-webui",
"versions": [
{
"version": "< 0.9.0",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| id | path | /api/v1/files/{id} | Unauthorized deletion of files via the shared-chat branch due to improper access control on delete. | CWE-639 |
| id | path | /api/v1/knowledge/{id}/files | Disclosure of file UUIDs to users with read access to a knowledge base, enabling potential enumeration of file identifiers. | CWE-639 |
Data
Build on a solid foundation withย Vulners data
Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data
Api
Power your application withย Vulners API
The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access
App
Assess and manage vulnerabilities withย Vulnersย tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
19 May 2026 03:08Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.18
EPSS0.00045
SSVC