PT-2026-59406

Summary Any authenticated user can read other users' private memories via /api/v1/retrieval/query/collection Details Vulnerability 1: Missing authorization in collection querying In backend/open webui/routers/retrieval.py, the query collection handler function accepts a list of collection names b...