Open WebUI Has Improper Access Control Leading to Arbitrary Prompt Read

published 2025-03-20 last yr. modified 2026-07-07 4mo ago also CVE-2024-7045 , PYSEC-2026-1727

cvss: 4.3; version 3.0, GitHub
cisa kev: Not listed; not in CISA's catalog
epss: —; no score, EPSS covers CVEs only
public exploits: 0; none known

In version v0.3.8 of open-webui/open-webui, improper access control vulnerabilities allow an attacker to view any prompts. The application does not verify whether the attacker is an administrator, allowing the attacker to directly call the /api/v1/prompts/ interface to retrieve all prompt information created by the admin, which includes the ID values. Subsequently, the attacker can exploit the /api/v1/prompts/command/{command_id} interface to obtain arbitrary prompt information.

Is GHSA-c7fq-p62p-wvpc in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

CVSS scores

assigned by	version	score	vector
OSV	3.0	4.3	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
GitHub	3.0	4.3	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected packages

ecosystem	package	affected	fixed in
pypi	open-webui	<=0.3.8	no fix listed

Classification

Weakness

CWE-1100 Insufficient Isolation of System-Dependent Functions
CWE-862 Missing Authorization

References

nvd.nist.gov /vuln/detail/CVE-2024-7045
advisory
github.com /open-webui/open-webui
package
huntr.com /bounties/03ea0826-af7b-4717-b63e-90fd19675ab2
web
pypi.org /project/open-webui
package
github.com /advisories/GHSA-c7fq-p62p-wvpc
advisory

Sources

GitHub Advisory GHSA-c7fq-p62p-wvpc
OSV PYSEC-2026-1727

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.