15 matches found
Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes
SummaryA user who is demoted from admin by an identity provider keeps admin-level read and write access to every user's notes, over any Socket.IO connection that was already open when the demotion happened. Open WebUI caches the user's role on the socket at connection time, and the two SSO...
6.5CVSS5.4AI score0.00513EPSS
SaveExploits1References7Affected Software1
20