Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/17 5:57 p.m.16 views

Open WebUI: RAG ACL Bypass in Milvus Multitenancy Mode

RAG ACL Bypass in Milvus Multitenancy Mode Summary This is a bypass of the fix for: - GHSA-h36f-rqpx-j5wx - CVE-2026-44560 - "Unauthorized File and Knowledge Base Content Access via RAG Vector Search" Open WebUI added collection-level ACL checks, but the patch can still be bypassed when Milvus...

6.5CVSS5.5AI score0.00335EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder