Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/14 8:25 p.m.20 views

Open WebUI Exposes System Prompt to Regular User [Non-Admin]

Summary A regular user non-admin can view the system prompt of the model which is set by an admin. Details When a regular user non-admin logs into the application, a http://IP:8080/api/models? web request is initiated by the application and in response, it reveals the system prompt of available...

6.5CVSS5.7AI score0.00281EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder