64 matches found
Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion
Summary External knowledge connections are created and owned by administrators, and are shared by every external knowledge base bound to them. Deleting an external knowledge base also removed that connection from the instance configuration, with no check on the caller's role and no check for othe...
7.1CVSS
SaveExploits0References6Affected Software1
20