CVE-2026-54006

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, POST /api/v1/calendars/events/{event_id}/update validates that the caller has write access to the calendar the event currently belongs to, but does not validate the destination calendar_id supplied in the request body. The model layer then persists the new calendar_id unconditionally. A regular user-role account can therefore create an event in their own calendar and immediately move it into any other user's calendar whose ID they know — bypassing the authorization check that create_event correctly performs. This vulnerability is fixed in 0.9.6.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/open-webui/open-webui/security/advisories/GHSA-f3g7-59qc-pqg6	Exploit Vendor Advisory
https://github.com/open-webui/open-webui/security/advisories/GHSA-f3g7-59qc-pqg6	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:*

History

25 Jun 2026, 13:41

Type	Values Removed	Values Added
References	~~() https://github.com/open-webui/open-webui/security/advisories/GHSA-f3g7-59qc-pqg6 -~~	() https://github.com/open-webui/open-webui/security/advisories/GHSA-f3g7-59qc-pqg6 - Exploit, Vendor Advisory
CPE		cpe:2.3:a:openwebui:open_webui::::::::
First Time		Openwebui open Webui Openwebui

23 Jun 2026, 18:18

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-23 18:18

Updated : 2026-06-25 13:41

NVD link : CVE-2026-54006

Mitre link : CVE-2026-54006

CVE.ORG link : CVE-2026-54006

JSON object : View

Products Affected

openwebui

open_webui

CWE

CWE-639

Authorization Bypass Through User-Controlled Key

{"id": "CVE-2026-54006", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-54006", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-23T17:51:36.543955Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "open-webui", "product": "open-webui", "versions": [{"status": "affected", "version": "< 0.9.6"}]}]}], "published": "2026-06-23T18:18:05.663", "references": [{"url": "https://github.com/open-webui/open-webui/security/advisories/GHSA-f3g7-59qc-pqg6", "tags": ["Exploit", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/open-webui/open-webui/security/advisories/GHSA-f3g7-59qc-pqg6", "tags": ["Exploit", "Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-639"}]}], "descriptions": [{"lang": "en", "value": "Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, POST /api/v1/calendars/events/{event_id}/update validates that the caller has write access to the calendar the event currently belongs to, but does not validate the destination calendar_id supplied in the request body. The model layer then persists the new calendar_id unconditionally. A regular user-role account can therefore create an event in their own calendar and immediately move it into any other user's calendar whose ID they know \u2014 bypassing the authorization check that create_event correctly performs. This vulnerability is fixed in 0.9.6."}], "lastModified": "2026-06-25T13:41:57.843", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FAB89FE0-6F34-4624-ABED-8DEE4783A17D", "versionEndExcluding": "0.9.6"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}