Open Webui CVE-2026-29071

The CVSS vector CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N indicates network accessibility but high attack complexity and requirement for prior authentication, resulting in a low base score of 3.1. The vulnerability requires legitimate user credentials and presents no immediate impact to confidentiality (low), integrity (none), or availability (none). Real-world exploitation risk is constrained by three factors: (1) attacker must possess valid authentication credentials, (2) the application is primarily designed for self-hosted deployment by trusted organizations rather than public internet exposure, and (3) the attack complexity is rated high, suggesting additional barriers exist in exploitation. While the information disclosure impact is concerning for privacy-sensitive environments, the authentication requirement and deployment model significantly reduce the pool of threat actors and attack surface compared to unauthenticated vulnerabilities. This is appropriately classified as low-priority despite touching sensitive data, given the defensive posture required by legitimate application use.

An authenticated employee at an organization using Open WebUI gains access to another employee's private memory collection by directly calling the /api/v1/retrieval/query/collection endpoint with parameters referencing a different user's collection ID. Due to missing authorization checks, the API returns the requested memory data without validating ownership. This allows the attacker to extract sensitive personal or work-related information stored by other users without their knowledge. The attack requires valid credentials and knowledge of target collection identifiers, but does not require complex techniques or multiple attack steps.