Description (CNA)
Open WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to reach disabled model provider backends by supplying an explicit backend index. Attackers can pass the index as a path segment or query parameter on Ollama and OpenAI-compatible listing routes to trigger requests carrying configured API keys, read version strings, and enumerate connections.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| open-webui / open-webui | affected 0 before 0.11.4; unaffected 0.11.4 |
CWE
CWE-639, CWE-862
References
- https://github.com/open-webui/open-webui/security/advisories/GHSA-hm62-64q2-6gxw
- https://www.vulncheck.com/advisories/open-webui-before-0.11.4-missing-authorization-via-backend-index-on-model-routes
ADP enrichment
No English description supplied.
No references supplied.