Lucene search
+L

30 matches found

PyPA
PyPA
•added 2026/08/10 10:43 a.m.•36 views

Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder

SummaryA user granted write access to a shared chat folder could permanently delete chats and messages belonging to the folder's owner. Deleting a folder cascades into the owner's chats and the entire subfolder subtree, and the deletion handler required only write access on subfolders instead of...

8.1CVSS5.9AI score0.00548EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder