Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/05/14 8:25 p.m.•28 views

Open WebUI Exposes System Prompt to Regular User [Non-Admin]

Summary A regular user non-admin can view the system prompt of the model which is set by an admin. Details When a regular user non-admin logs into the application, a http://IP:8080/api/models? web request is initiated by the application and in response, it reveals the system prompt of available...

6.5CVSS6.5AI score0.00392EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder