Most recent entries from all

fkie_cve-2026-59222

2026-10-01T11:41:02.013388+00:00

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 before 0.10.0, GET /api/v1/channels//members returned full UserModelResponse objects for channel members, including settings.ui.toolServers[].key and webhook configuration, allowing a normal channel participant to retrieve other users’ sensitive settings. This issue is fixed in version 0.10.0.

GHSA-gh7p-78x6-jw6m — Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials

2026-10-01T11:41:02.013475+00:00

Affected: PyPI: open-webui

### Summary

The channel members endpoint serializes and returns **full user models** for channel participants, including settings objects. A normal user in a DM can retrieve admin-only sensitive configuration such as webhook URLs and tool server key material (`settings.ui.toolServers[].key`), which is not available via standard user info APIs.

### Details

The endpoint GET `/api/v1/channels/{id}/members` returns the full serialized user model for every member in the channel. In both the DM and non-DM code paths, the handler constructs the response with `[UserModelResponse(**user.model_dump(), is_active=...)]` and returns it as the users list. Because `UserModel` (`models/users.py`) includes a settings object (`UserSettings`) and arbitrary UI configuration (`settings.ui`), the endpoint exposes other users' sensitive configuration to any channel participant.

Practically, a regular user who participates in a DM or group can call `/api/v1/channels/{id}/members` and receive other members' settings, including admin-only details such as webhook notification URLs and tool server configuration, including credential fields like `settings.ui.toolServers[].key`. These values are not returned by the normal user profile endpoints (e.g., `/api/v1/users/{user_id}/info`).

### PoC

1. Start a local Open WebUI instance 2. Log in as admin and in the Admin Panel, go to Settings -> General and check *Channels (Beta)*, then press Save. 3. Create a low-privilege user in the Users tab 4. Click o…

PYSEC-2026-3598 — Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials

2026-10-01T11:41:02.013585+00:00

Affected: PyPI: open-webui

### Summary

### Details

### PoC