Medium severity4.3NVD Advisory· Published Sep 9, 2026· Updated Sep 16, 2026
CVE-2026-87017
CVE-2026-87017
Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.1, the built-in knowledge search tool passed the caller's readable knowledge identifiers through a metadata filter, but the search methods in eleven shipped vector backends ignored that filter. An authenticated user on an affected backend could enumerate the identifiers, names, and descriptions of inaccessible knowledge bases from the shared collection, although the associated document text remained in separate collections. This issue is fixed in version 0.11.1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
open-webuiPyPI | >= 0.7.0, < 0.11.1 | 0.11.1 |
Affected products
3(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:*range: >=0.7.0,<0.11.1
- (no CPE)range: <0.11.1
Patches
Vulnerability mechanics
References
5- github.com/open-webui/open-webui/commit/1d6d4e6e6647e1d403438ede7bd9ba20bc4cc8f6nvdPatchWEB
- github.com/open-webui/open-webui/security/advisories/GHSA-pcvc-8vrv-8q6wnvdExploitVendor AdvisoryWEB
- github.com/advisories/GHSA-pcvc-8vrv-8q6wghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-87017ghsaADVISORY
- github.com/open-webui/open-webui/releases/tag/v0.11.1nvdRelease NotesWEB
News mentions
1- Open WebUI: 18 Vulnerabilities Disclosed, Patch Released in Version 0.11.1Vypr Intelligence · Sep 10, 2026