6.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-44571

CVE-2026-44571: Open WebUI: Improper Authorization in Standard Channels Allows Message Updates with Read Permission

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, in standard channels (i.e., channels whose channel.type is neither group nor dm), the endpoint POST /api/v1/channels/{channel_id}/messages/{message_id}/update can be accessed with read permission only. When access_control is set to None, the authorization check has_access(..., type="read") evaluates to True, allowing users who are not the message owner to update messages. As a result, unauthorized modification of other users’ messages is possible. This vulnerability is fixed in 0.8.6.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-44571

CVE-2026-44571:

6.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
open-webui	pip	<= 0.8.5	0.8.6

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the update_message_by_id function within backend/open_webui/routers/channels.py. The core of the issue is an improper authorization check. Instead of verifying if a user has write permission to update a message, the function only checks for read permission. This is a critical flaw because read permissions are much more broadly granted than write permissions.

The vulnerability is exacerbated by the behavior of the has_access function in backend/open_webui/utils/access_control.py. When no specific access control rules are defined for a channel, this function defaults to granting read access. This means that in a default configuration, any user who can see a message can also edit it.

The exploitation of this vulnerability allows a low-privileged authenticated user to modify any message in a standard channel, leading to a loss of data integrity. The fix, as described in the advisory, is to change the permission check in update_message_by_id from has_access(..., type="read") to has_access(..., type="write"), ensuring that only users with appropriate permissions can modify messages.

Vulnerable functions

open_webui.routers.channels.update_message_by_id

backend/open_webui/routers/channels.py

The `update_message_by_id` function in `backend/open_webui/routers/channels.py` incorrectly checks for `read` permissions instead of `write` permissions when updating a message. This allows any user with read access to a channel to modify messages belonging to other users in that channel.

open_webui.utils.access_control.has_access

backend/open_webui/utils/access_control.py

The `has_access` function in `backend/open_webui/utils/access_control.py` is part of the vulnerable authorization flow. When `access_control` is `None`, it defaults to allowing `read` access, which is then improperly used by `update_message_by_id` to authorize a write operation.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.