https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 05:16:15 +0000 https://vulnerability.circl.lu/vuln/cve-2026-70483 <p><strong>Affected:</strong> open-webui</p> <p>Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, DELETE /api/v1/chats/{id} cancelled a chat&#39;s in-flight tasks before checking whether the caller could delete that chat. Any authenticated user who knew another user&#39;s chat id could abort that user&#39;s running model response, title generation, or tag generation, even though the delete was refused and no chat data was deleted, modified, or disclosed. This issue is fixed in 0.11.0.</p> <p><strong>Affected:</strong> open-webui</p> <p>Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, DELETE /api/v1/chats/{id} cancelled a chat&#39;s in-flight tasks before checking whether the caller could delete that chat. Any authenticated user who knew another user&#39;s chat id could abort that user&#39;s running model response, title generation, or tag generation, even though the delete was refused and no chat data was deleted, modified, or disclosed. This issue is fixed in 0.11.0.</p> https://vulnerability.circl.lu/vuln/cve-2026-70483