Open WebUI's Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts

Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts Affected ComponentFolder creation endpoint and form model:- backend/openwebui/models/folders.py lines 72-77, FolderForm with extra='allow'- backend/openwebui/models/folders.py lines 95-106, insertnewfolder...

CVE-2026-23844

Whisper Money is a personal finance application. Versions prior to 0.1.5 have an insecure direct object reference vulnerability. A user can update/create account balances in other users' bank accounts. Version 0.1.5 fixes the issue...

The vulnerability of the software solution for comprehensive enterprise management, Idea Platform Service Manager, stems from insufficient validation of input data. This allows attackers to gain access to other users’ accounts within their working environment.

The vulnerability of the software solution for comprehensive enterprise management, Idea Platform Service Manager, is related to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to remotely gain control over the accounts of other users within it...