What is the CVSS score of CVE-2026-59227?

CVE-2026-59227 has a CVSS 3.1 base score of 5.4 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L. EPSS exploitation probability: 0.3%.

Is there a public PoC exploit available for CVE-2026-59227?

Yes, a public proof-of-concept exploit is available for CVE-2026-59227. Prioritise patching immediately. EPSS: 0.3%.

Is there a patch available for CVE-2026-59227?

Yes, a patch is available for CVE-2026-59227. Update the affected software to the latest version immediately.

Open WebUI CVE-2026-59227

EUVD-2026-42618 MEDIUM

Missing Authorization (CWE-862)

2026-07-09 GitHub_M

GHSA-rqj7-6wrp-6g2g

Authentication Bypass Open Webui

5.4

CVSS 3.1 · NVD

Severity by source

Vendor (GitHub_M) PRIMARY

MEDIUM

qualitative

NVD

5.4 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

vuln.today AI

5.4 MEDIUM

PR:L confirmed by account requirement; I:L added over original I:N because unauthorized actions are performed against admin-provisioned credentials, representing a real integrity boundary violation.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (GitHub_M).

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

Low

Lifecycle Timeline

CVSS changed

Jul 10, 2026 - 02:52 NVD

4.3 (MEDIUM) 5.4 (MEDIUM)

Patch available

Jul 09, 2026 - 18:01 EUVD

Analysis Generated

Jul 09, 2026 - 17:20 vuln.today

DescriptionNVD

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.11 before 0.10.0, POST /api/v1/images/edit required only a verified account and did not enforce the global image-edit switch or the per-user image-generation permission, allowing a non-admin user to invoke server-side image editing with administrator-configured provider credentials. This issue is fixed in version 0.10.0.

AnalysisAI

Open WebUI versions 0.8.11 through 0.10.0 expose a missing-authorization flaw (CWE-862) on the POST /api/v1/images/edit endpoint, allowing any verified non-admin account to invoke server-side image editing even when administrators have disabled the global image-edit switch or revoked per-user image-generation permissions. The bypass enables unprivileged users to consume admin-configured third-party image provider credentials - exhausting API quotas or generating unauthorized images - undermining deliberate access controls set by the platform operator. No public exploit has been identified at time of analysis; a vendor-confirmed fix is available in version 0.10.0.

Technical ContextAI

Open WebUI is a self-hosted web platform exposing a RESTful API for AI model interaction, including image generation and editing backed by admin-configured providers such as AUTOMATIC1111 or ComfyUI. The affected endpoint, POST /api/v1/images/edit, sits behind account-verification middleware but skips two independent authorization gate checks: the platform-wide image-edit feature toggle (a global on/off switch admins control) and the per-user image-generation permission grant stored in user role configuration. The root cause class is CWE-862 (Missing Authorization): the application correctly authenticates the caller but fails to assert that the caller is permitted to invoke the specific resource action. The CPE string cpe:2.3:a:open-webui:open-webui:*:*:*:*:*:*:*:* covers all affected releases from 0.8.11 up to the patched 0.10.0. Because the endpoint proxies to admin-provisioned backend credentials, the blast radius is constrained to quota exhaustion and unauthorized image generation rather than credential exposure.

RemediationAI

Upgrade to Open WebUI version 0.10.0 or later, which enforces both the global image-edit feature toggle and per-user image-generation permissions on the POST /api/v1/images/edit endpoint. The fix is vendor-confirmed via the tagged release at https://github.com/open-webui/open-webui/releases/tag/v0.10.0, with the underlying code change available at https://github.com/open-webui/open-webui/commit/e038bab66dec8d17212eec35b5cb6d6b785a4200 and PR https://github.com/open-webui/open-webui/pull/26009. For deployments that cannot immediately upgrade, a compensating control is to block the POST /api/v1/images/edit path at the reverse proxy or WAF layer - this eliminates the bypass but also disables image editing for all users, including those legitimately authorized. Alternatively, administrators can remove all image provider backend credentials from platform settings until the patch is applied, preventing credential abuse at the cost of losing the image generation feature entirely for all users.