Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/08/04 8:58 p.m.•20 views

Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder

Summary A user granted write access to a shared chat folder could permanently delete chats and messages belonging to the folder's owner. Deleting a folder cascades into the owner's chats and the entire subfolder subtree, and the deletion handler required only write access on subfolders instead of...

8.1CVSS5.8AI score0.00548EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder