CVE-2026-45397
MediumPublic exploitOpen WebUI Vulnerable to Unauthenticated RAG Configuration Disclosure
Published May 14, 2026 · Updated Aug 12, 2026 · Also known as GHSA-65pg-qhhw-mxwg, PYSEC-2026-2706
Key Facts
Routine patching- CVE-2026-45397 is a medium-severity vulnerability (CVSS 5.3 v3.1) affecting Open Webui (Openwebui).
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 0.8% probability of exploitation in the next 30 days.
- Fixed versions are available, including Open Webui 0.9.5.
- Brandefense priority: routine patching, as no exploitation is known and its severity is moderate or low.
CVSS v3.1
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS (30-day exploit likelihood)
0.8%
Higher than 56.0% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
Available
Proof-of-concept or weaponized module
Get the full CVE-2026-45397 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, GET /api/v1/retrieval/ returns live RAG pipeline configuration to any unauthenticated HTTP client. No Authorization header, cookie, or API key is required. Every adjacent endpoint on the same router (/embedding, /config) is correctly guarded by get_admin_user making this a targeted omission. This vulnerability is fixed in 0.9.5.
Affected Products
3 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| Open WebuiOpenwebui | >= < 0.9.5 | 0.9.5 |
Patched Releases
Open Webui
0.9.5
Timeline
Publicly disclosed
May 14, 2026
Last updated
Aug 12, 2026
Weakness Type
- CWE-306 Missing Authentication for Critical Function
References
- advisoryGHSA advisory
- advisoryhttps://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45397.json
- advisoryhttps://github.com/open-webui/open-webui/security/advisories
- advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2026-45397
- advisoryUSOM advisory
FAQ
Common Questions.
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.
Affected: Open Webui (Openwebui) versions >= < 0.9.5. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including Open Webui 0.9.5.
Brandefense priority: routine patching, as no exploitation is known and its severity is moderate or low.
Is CVE-2026-45397 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo