{"uuid": "0d011df8-63a7-4c1a-9187-6b4d65ea1d0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59213", "type": "seen", "source": "https://gist.github.com/alon710/9bcf9d1bd3d7650ebf44f14eff2dc08a", "content": "# CVE-2026-59213: CVE-2026-59213: Authorization Bypass and Cross-Session Cache Leakage in Open WebUI\n\n> **CVSS Score:** 3.5\n> **Published:** 2026-07-24\n> **Full Report:** https://cvereports.com/reports/CVE-2026-59213\n\n## Summary\nAn authorization bypass and cross-session cache leakage vulnerability exists in the model-listing backend of Open WebUI. The flaw stems from a configuration error in the @cached decorator of the aiocache library, which maps all unique user session queries to a single static cache key.\n\n## TL;DR\nOpen WebUI's improper use of the aiocache decorator collapses per-user model lists into a single cache key, allowing low-privileged users to leak restricted model metadata during the 1-second TTL window.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-524: Use of Cache Containing Sensitive Information\n- **Attack Vector**: Network (AV:N)\n- **CVSS Severity Score**: 3.5 (Low)\n- **EPSS Score**: 0.00296\n- **Impact**: Information Disclosure / Access Control Bypass\n- **Exploit Status**: PoC (Proof of Concept)\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Open WebUI Backend (openai and ollama routers)\n- **Open WebUI**: >= 0.6.27, < 0.10.0 (Fixed in: `0.10.0`)\n\n## Mitigation\n\n- Upgrade Open WebUI to version 0.10.0 or newer.\n- Disable model listing caching temporarily by setting MODELS_CACHE_TTL to 0.\n- Audit custom middleware and caching logic to ensure dynamic keys are built using proper callback structures.\n\n**Remediation Steps:**\n1. Determine current running version of Open WebUI backend.\n2. Apply application upgrade to version 0.10.0 or higher.\n3. Restart the backend application services or container instance.\n4. Validate user access separation by querying the API endpoints with a low-privileged test account.\n\n## References\n\n- [GitHub Security Advisory](https://github.com/open-webui/open-webui/security/advisories/GHSA-3wp3-xxj9-5jqq)\n- [NVD CVE-2026-59213 Record](https://nvd.nist.gov/vuln/detail/CVE-2026-59213)\n- [CVE-2026-59213 CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-59213)\n- [Open WebUI Pull Request 25783](https://github.com/open-webui/open-webui/pull/25783)\n- [Open WebUI v0.10.0 Release Notes](https://github.com/open-webui/open-webui/releases/tag/v0.10.0)\n- [Wiz Vulnerability Database Analysis](https://www.wiz.io/vulnerability-database/cve/cve-2026-59213)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-59213) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-24T22:35:49.993408Z"}