Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, an internal-only bypass_filter parameter is exposed on the /openai/chat/completions and /ollama/api/chat HTTP endpoints via FastAPI query string binding, allowing any authenticated user to append ?bypass_filter=true and bypass model access control checks to invoke admin-restricted models. This vulnerability is fixed in 0.8.11.
References
| Link | Resource |
|---|---|
| https://github.com/open-webui/open-webui/security/advisories/GHSA-v6qf-75pr-p96m | Exploit Patch Vendor Advisory |
| https://github.com/open-webui/open-webui/security/advisories/GHSA-v6qf-75pr-p96m | Exploit Patch Vendor Advisory |
Configurations
History
19 May 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/open-webui/open-webui/security/advisories/GHSA-v6qf-75pr-p96m - Exploit, Patch, Vendor Advisory |
19 May 2026, 01:27
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/open-webui/open-webui/security/advisories/GHSA-v6qf-75pr-p96m - Exploit, Patch, Vendor Advisory | |
| First Time |
Openwebui
Openwebui open Webui |
|
| CPE | cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:* |
15 May 2026, 22:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-15 22:16
Updated : 2026-05-19 14:16
NVD link : CVE-2026-45365
Mitre link : CVE-2026-45365
CVE.ORG link : CVE-2026-45365
JSON object : View
Products Affected
openwebui
- open_webui
CWE
CWE-285
Improper Authorization