Medium severity6.5NVD Advisory· Published Sep 9, 2026· Updated Sep 14, 2026
CVE-2026-88000
CVE-2026-88000
Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/chats/{id}/messages/{message_id} used the chat-history deletion helper in backend/open_webui/models/chats.py to follow childrenIds without recording visited message identifiers. An authenticated user could store a cyclic chat tree and delete a message, causing a synchronous infinite loop on the server request loop that blocked every user's requests until the process was killed. This issue is fixed in version 0.11.1.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
open-webuiPyPI | >= 0.10.0, < 0.11.1 | 0.11.1 |
Affected products
3(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:*range: >=0.10.0,<0.11.1
- (no CPE)range: <0.11.1
Patches
Vulnerability mechanics
References
5- github.com/open-webui/open-webui/commit/b933292d63d12be3fd1416fe55519ddc7aa336bcnvdPatchWEB
- github.com/open-webui/open-webui/pull/28035nvdExploitPatchWEB
- github.com/open-webui/open-webui/security/advisories/GHSA-3cgp-3cqx-j8w2nvdExploitVendor AdvisoryWEB
- github.com/advisories/GHSA-3cgp-3cqx-j8w2ghsaADVISORY
- github.com/open-webui/open-webui/releases/tag/v0.11.1nvdRelease NotesWEB
News mentions
1- Open WebUI: 18 Vulnerabilities Disclosed, Patch Released in Version 0.11.1Vypr Intelligence · Sep 10, 2026