Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/15 9:09 p.m.18 views

CVE-2026-45351 Open WebUI: Exposure of System Prompt to Regular User [Non-Admin]

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.9, when a regular user non-admin logs into the application, a http://IP:8080/api/models? web request is initiated by the application and in response, it reveals the system prompt of...

6.5CVSS6AI score
SaveExploits0References3
Rows per page
Query Builder