{"vulnerability": "cve-2026-70494", "sightings": [{"uuid": "0afacd79-d74d-4ff0-b4c7-0cedd8c9e148", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70494", "type": "seen", "source": "https://gist.github.com/alon710/e57220ec033758e1c7ba8d20ade18b9d", "content": "# CVE-2026-70494: CVE-2026-70494: Broken Access Control in Open WebUI Folder Deletion Endpoint\n\n> **CVSS Score:** 8.1\n> **Published:** 2026-08-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-70494\n\n## Summary\nA critical broken access control vulnerability in Open WebUI (v0.10.0 to v0.11.0) allows authenticated write-collaborators to delete shared subfolders they do not own. Because deletion triggers a backend cascade using the folder owner's identity, this results in unauthorized permanent deletion of the owner's nested chats, messages, and files.\n\n## TL;DR\nAuthenticated collaborators with write access to a shared folder can delete subfolders owned by others, triggering a cascading deletion of the folder owner's private chat history.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862 (Missing Authorization) / CWE-863 (Incorrect Authorization)\n- **Attack Vector**: Network (Remote)\n- **CVSS v3.1 Score**: 8.1 (High)\n- **EPSS Score**: Not Available\n- **Impact**: Data Destruction / Loss of Chat History\n- **Exploit Status**: POC-Conceptual\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Open WebUI self-hosted AI platform\n- **Open WebUI**: >= v0.10.0, < v0.11.0 (Fixed in: `v0.11.0`)\n\n## Mitigation\n\n- Upgrade Open WebUI to version v0.11.0 or later.\n- Manually patch backend/open_webui/routers/folders.py to restrict subfolder deletion to owners and administrators.\n\n**Remediation Steps:**\n1. Pull the latest Docker image or release package for Open WebUI v0.11.0.\n2. Restart the application container.\n3. Verify that folder deletion requests from non-owners without admin privileges return a 403 Forbidden status code.\n\n## References\n\n- [CVE-2026-70494 Record](https://www.cve.org/CVERecord?id=CVE-2026-70494)\n- [GHSA-3cg5-48j3-v4gv Security Advisory](https://github.com/open-webui/open-webui/security/advisories/GHSA-3cg5-48j3-v4gv)\n- [Pull Request #27003](https://github.com/open-webui/open-webui/pull/27003)\n- [Fix Commit 915ef7d0798d3175819cedbb2f62d7bf0db78c98](https://github.com/open-webui/open-webui/commit/915ef7d0798d3175819cedbb2f62d7bf0db78c98)\n- [Open WebUI v0.11.0 Release](https://github.com/open-webui/open-webui/releases/tag/v0.11.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-70494) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-04T21:31:22.559648Z"}, {"uuid": "f3d25416-5a42-4b17-96ac-62c28b72c1fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70494", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4gwhhcjz2ufst", "content": "CVE-2026-70494 - Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder\nCVE ID : CVE-2026-70494\n \n Published : Aug. 4, 2026, 9:16 p.m. | 30\u00a0minutes ago\n \n Description : Open WebUI is an extensible, feature-rich, and user...", "creation_timestamp": "2026-08-04T22:01:37.275408Z"}]}