PT-2026-59361

Summary Several direct, index-addressed Ollama proxy routes accept a caller-supplied url idx path parameter and use it as a raw index into the admin-configured OLLAMA BASE URLS list. Access control on these routes validates only whether the user may use the requested model, never which backend th...

GHSA-9RPJ-V7HF-VV2W Open WebUI: Authenticated users can target arbitrary configured Ollama backends via unguarded url_idx path parameter

Summary Several direct, index-addressed Ollama proxy routes accept a caller-supplied urlidx path parameter and use it as a raw index into the admin-configured OLLAMABASEURLS list. Access control on these routes validates only whether the user may use the requested model, never which backend the...