CVE•Published 2026-06-23•Modified 2026-06-25•0 articles on news•5 live references•NVD data

CVE-2026-54019Openwebui · Open_webui

Vulnerability data via NVD (ingested)

CVSS v3.1

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS percentile

—

Weaknesses (CWE)

CWE-862Missing Authorization CWE-943Improper Neutralization of Special Elements in Data Query Logic

Description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI added collection-level ACL checks, but the patch can still be bypassed when Milvus multitenancy mode is enabled. The ACL allows unknown non-KB collection names as legacy/ephemeral collections. In Milvus multitenancy mode, that user-controlled collection name becomes a resource_id and is interpolated into a Milvus expression without escaping. This is caused by an incomplete fix for CVE-2026-44560 This vulnerability is fixed in 0.9.6.

Timeline

Published 2026-06-23

Modified 2026-06-25

External references

NVD MITRE Exploit-DB GitHub PoC VulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common). Live host counts are a Premium feature.

Shodan · vuln tag

vuln:CVE-2026-54019

Hosts Shodan has explicitly fingerprinted as vulnerable.

Shodan · product

product:"Openwebui Open Webui"

All exposed Openwebui Open Webui instances — cross-reference with the CVE's affected-version range.

Shodan · banner/body mention

http.html:"Open Webui"

HTTP body or banner mentions "Open Webui" — catches deploys Shodan didn't identify as a product.

More intel sources (5)

Shodan report

vuln:CVE-2026-54019