CVE-2026-29071 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.8.6, any authenticated user can read other…
Low CVSS: 3.1

CVE-2026-29071

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.8.6, any authenticated user can read other users' private memories via `/api/v1/retrieval/query/collection`. Version 0.8.6 patches the issue.
Vendor
Openwebui
Product
Open Webui
CWE
CWE-639
Yayın Tarihi
2026-03-27 00:16:22
Güncelleme
2026-04-01 16:09:53
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-639 Open Webui LOW Openwebui 2026

Referanslar

https://github.com/open-webui/open-webui/security/advisories/GHSA-w9f8-gxf9-rhvw