CVE-2026-45365
Open WebUI: Authenticated users can bypass model access control via exposed query parameter
MEDIUM 5.4EPSS 0.3%
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, an internal-only bypass_filter parameter is exposed on the /openai/chat/completions and /ollama/api/chat HTTP endpoints via FastAPI query string binding, allowing any authenticated user to append ?bypass_filter=true and bypass model access control checks to invoke admin-restricted models. This vulnerability is fixed in 0.8.11.
- Affected
- open-webui
- CVSS v3.1 GITHUB
- 5.4 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N - EPSS
- 0.27% chance of exploitation in the next 30 days, 18th percentile
- Published
- 2026-05-15
- Updated
- 2026-05-19