{"uuid": "686733c7-191f-4c1f-acfc-b2ce2e369785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59225", "type": "seen", "source": "https://gist.github.com/alon710/dc8fbe1b073218955707634edeb9a32e", "content": "# CVE-2026-59225: CVE-2026-59225: Access Control Bypass in Open WebUI Arena Task Endpoints\n\n> **CVSS Score:** 5.4\n> **Published:** 2026-07-24\n> **Full Report:** https://cvereports.com/reports/CVE-2026-59225\n\n## Summary\nA missing authorization vulnerability (CWE-862) exists in Open WebUI from version 0.8.12 before 0.10.0. This flaw allows authenticated non-administrative users to access restricted underlying backend models via specific task endpoints, bypassing configured model permissions.\n\n## TL;DR\nAuthenticated users can bypass model restrictions to query unauthorized backend models via task endpoints.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 5.4 (Medium)\n- **EPSS Score**: 0.00211\n- **Impact**: Confidentiality, Availability (Low)\n- **Exploit Status**: PoC\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Open WebUI self-hosted AI platform\n- **Open WebUI**: >= 0.8.12, < 0.10.0 (Fixed in: `0.10.0`)\n\n## Mitigation\n\n- Upgrade Open WebUI to version 0.10.0 or later.\n- Disable Arena wrapper models in the administration panel.\n- Implement reverse proxy rules to block access to '/api/v1/tasks/*' for unauthorized users.\n\n**Remediation Steps:**\n1. Pull the updated Docker image: docker pull ghcr.io/open-webui/open-webui:v0.10.0\n2. Restart the container to apply the changes.\n3. Verify model permissions across active Arena configurations.\n\n## References\n\n- [Fix Commit](https://github.com/open-webui/open-webui/commit/dc4924b66e655b315e3be4430a3e51b7d5c20acc)\n- [Pull Request #26046](https://github.com/open-webui/open-webui/pull/26046)\n- [Release v0.10.0](https://github.com/open-webui/open-webui/releases/tag/v0.10.0)\n- [GitHub Security Advisory](https://github.com/open-webui/open-webui/security/advisories/GHSA-m3qf-58wf-w979)\n- [NVD CVE Record](https://nvd.nist.gov/vuln/detail/CVE-2026-59225)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-59225)\n- [CVEListV5 Repository Record](https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/59xxx/CVE-2026-59225.json)\n- [Wiz Vulnerability Database](https://www.wiz.io/vulnerability-database/cve/cve-2026-59225)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-59225) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-24T22:35:49.906167Z"}