High 7.1Published Aug 13, 2026

CVE-2026-59714Open WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel message_ids)

Updated under an hour ago (2026-10-19 07:30 UTC)

Does this affect you?

It affects open-webui. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for open-webui

Exploited in the last 30 days

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 before 0.10.0, any authenticated user can overwrite the content of a message in a channel they do not belong to (including private and DM channels) by sending a chat completion request with a channel:-prefixed chat_id and a target message_id. The channel: path routes pipeline output through _make_channel_emitter, which writes to the Messages table using the caller-supplied message_id without binding it to the channel. This issue is fixed in version 0.10.0.

CVSS: 7.1 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
Weakness (CWE): CWE-862
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: GitHub_M
NVD analysis: Deferred
Record last updated: Aug 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

open-webui open-webui open_webui:open_webui (from the name)	from 0.9.5, < 0.10.0	CNA record

References

https://github.com/open-webui/open-webui/security/advisories/GHSA-x2ff-v5v8-m75mx-refsource-confirm
https://github.com/open-webui/open-webui/pull/26385x-refsource-misc
https://github.com/open-webui/open-webui/commit/ac3449cac91e62b08a7c28e54fcd044d14dea791x-refsource-misc
https://github.com/open-webui/open-webui/releases/tag/v0.10.0x-refsource-misc

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.