Low severityNVD Advisory· Published Jul 9, 2026· Updated Jul 9, 2026
Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)
CVE-2026-59213
Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 before 0.10.0, get_all_models handlers in routers/openai.py and routers/ollama.py passed a lambda to aiocache key instead of key_builder, causing permission-filtered per-user model lists to share a static cache entry and exposing one user’s model list to another caller during the TTL window. This issue is fixed in version 0.10.0.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
open-webuiPyPI | >= 0.6.27, < 0.10.0 | 0.10.0 |
Affected products
1- Range: <0.10.0
Patches
Vulnerability mechanics
References
6- github.com/advisories/GHSA-3wp3-xxj9-5jqqghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-59213ghsaADVISORY
- github.com/open-webui/open-webui/commit/0fc630b34b2899599dabffffa012afd47599aa75ghsax_refsource_MISCWEB
- github.com/open-webui/open-webui/pull/25783ghsax_refsource_MISCWEB
- github.com/open-webui/open-webui/releases/tag/v0.10.0ghsax_refsource_MISCWEB
- github.com/open-webui/open-webui/security/advisories/GHSA-3wp3-xxj9-5jqqghsax_refsource_CONFIRMWEB
News mentions
0No linked articles in our index yet.