CVE Explorer
CVE-2026-45387
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, when setting model permissions so that a group has read access to it, intending for other users to use it, those users also can read the model's system prompt. However users may consider their system prompt confidential, so this is considered a security issue. This vulnerability is fixed in 0.9.5.
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"product":"open-webui","vendor":"open-webui","versions":[{"status":"affected","version":"< 0.9.5"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:f8355dfd9ac98efaf10b4893c2dd88dd60f955e1684eb5d497e8e85620649f2e · sha256:a81ff0e2e1d66ac0… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:f8355dfd9ac98efaf10b4893c2dd88dd60f955e1684eb5d497e8e85620649f2e · sha256:a81ff0e2e1d66ac0… · /containers/cna/metrics/0/cvssV3_1
CWE assertions
1 source assertion{"cweId":"CWE-200","description":"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:f8355dfd9ac98efaf10b4893c2dd88dd60f955e1684eb5d497e8e85620649f2e · sha256:a81ff0e2e1d66ac0… · /containers/cna/problemTypes/0/descriptions/0
Source references
2 source assertions{"name":"https://github.com/open-webui/open-webui/security/advisories/GHSA-h2cw-7qw9-56xr","tags":["x_refsource_CONFIRM"],"url":"https://github.com/open-webui/open-webui/security/advisories/GHSA-h2cw-7qw9-56xr"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:f8355dfd9ac98efaf10b4893c2dd88dd60f955e1684eb5d497e8e85620649f2e · sha256:a81ff0e2e1d66ac0… · /containers/cna/references/0
{"tags":["exploit"],"url":"https://github.com/open-webui/open-webui/security/advisories/GHSA-h2cw-7qw9-56xr"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:f8355dfd9ac98efaf10b4893c2dd88dd60f955e1684eb5d497e8e85620649f2e · sha256:a81ff0e2e1d66ac0… · /containers/adp/0/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.