Lucene search
+L

15 matches found

PyPA
PyPA
•added 2026/10/01 4:38 p.m.•16 views

Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes

SummaryA user who is demoted from admin by an identity provider keeps admin-level read and write access to every user's notes, over any Socket.IO connection that was already open when the demotion happened. Open WebUI caches the user's role on the socket at connection time, and the two SSO...

6.5CVSS5.4AI score0.00513EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder