What is the CVSS score of CVE-2026-29071?

CVE-2026-29071 has a CVSS 3.1 base score of 3.1 (Low). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Open Webui are affected by CVE-2026-29071?

CVE-2026-29071 is a low-severity vulnerability in Open WebUI (CVSS 3.1). The limited severity suggests constrained impact, typically requiring specific conditions or local access for exploitation.. A patch is available.

How to fix or mitigate CVE-2026-29071?

During next maintenance window: Apply vendor patches when convenient. Monitor vendor channels for updates.

Open Webui CVE-2026-29071

EUVD-2026-16486 LOW

Authorization Bypass Through User-Controlled Key (CWE-639)

2026-03-27 security-advisories@github.com

GHSA-w9f8-gxf9-rhvw

Authentication Bypass Open Webui Openwebui

3.1

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

3.1 LOW

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 27, 2026 - 00:22 euvd

EUVD-2026-16486

Analysis Generated

Mar 27, 2026 - 00:22 vuln.today

CVE Published

Mar 27, 2026 - 00:16 nvd

LOW 3.1

DescriptionGitHub Advisory

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.8.6, any authenticated user can read other users' private memories via /api/v1/retrieval/query/collection. Version 0.8.6 patches the issue.

AnalysisAI

Open WebUI versions prior to 0.8.6 allow authenticated users to read other users' private memories through an insufficiently restricted API endpoint at /api/v1/retrieval/query/collection, exposing sensitive user data stored within the self-hosted AI platform. The vulnerability requires valid authentication credentials and carries a CVSS score of 3.1 with low attack complexity, indicating limited real-world exploitability despite the information disclosure impact. No public exploit code or active exploitation has been confirmed at the time of analysis.

Technical ContextAI

Open WebUI is a self-hosted artificial intelligence platform designed to operate in offline or isolated network environments. The vulnerability stems from insufficient access controls on the retrieval API endpoint /api/v1/retrieval/query/collection, classified under CWE-639 (Authorization Bypass Through User-Controlled Key). The root cause is inadequate authorization checks that fail to validate whether an authenticated user has legitimate access to query memory collections belonging to other users. The flaw allows lateral privilege escalation within the application's user model, where one authenticated user can access data intended to be private to other users. This represents a classic authorization logic error rather than an authentication bypass, as the user is properly authenticated but the application fails to enforce object-level access control.

RemediationAI

Upgrade Open WebUI to version 0.8.6 or later immediately, as the vendor has released a patched version addressing the authorization bypass. Apply this patch in your self-hosted deployment by following the official upgrade instructions provided in the GitHub repository. If immediate upgrading is not possible, implement network-level access restrictions by limiting who can reach the Open WebUI application interface to trusted internal users only, and audit existing API access logs for any evidence of cross-user memory queries via the /api/v1/retrieval/query/collection endpoint. Once patched, review user account access to ensure no unauthorized data exposure has occurred.