cvedb.io
CVE-2026-44555
HIGH · CVSS 7.6
EPSS exploitation probability: 0%
Published 2026-05-15T20:16:46.967 · Last modified 2026-06-17T10:50:47.120

Summary

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, Open WebUI supports model composition via base_model_id: a user-defined model (e.g., "Cheap Assistant") can reference an existing base model (e.g., "gpt-4-turbo-restricted") that provides the actual inference capability. When a user queries the composed model, the access control pipeline verifies the user has access to the composed model but never re-verifies access to the chained base model. Additionally, the model creation and import endpoints accept arbitrary base_model_id values without checking that the caller has access to that base model. Combined, this allows any user with the default model creation permission to create a model that chains to a restricted base model —

Affected products

openwebui — open_webui

Does this affect you?

Add your gear to cvedb and we'll alert you only when openwebui ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.