https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 11:41:01 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-59222 <p>Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 before 0.10.0, GET /api/v1/channels//members returned full UserModelResponse objects for channel members, including settings.ui.toolServers[].key and webhook configuration, allowing a normal channel participant to retrieve other users’ sensitive settings. This issue is fixed in version 0.10.0.</p> <p>Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 before 0.10.0, GET /api/v1/channels//members returned full UserModelResponse objects for channel members, including settings.ui.toolServers[].key and webhook configuration, allowing a normal channel participant to retrieve other users’ sensitive settings. This issue is fixed in version 0.10.0.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-59222 https://vulnerability.circl.lu/vuln/ghsa-gh7p-78x6-jw6m <p><strong>Affected:</strong> PyPI: open-webui</p> <p>### Summary</p> <p>The channel members endpoint serializes and returns **full user models** for channel participants, including settings objects. A normal user in a DM can retrieve admin-only sensitive configuration such as webhook URLs and tool server key material (`settings.ui.toolServers[].key`), which is not available via standard user info APIs.</p> <p>### Details</p> <p>The endpoint GET `/api/v1/channels/{id}/members` returns the full serialized user model for every member in the channel. In both the DM and non-DM code paths, the handler constructs the response with `[UserModelResponse(**user.model_dump(), is_active=...)]` and returns it as the users list. Because `UserModel` (`models/users.py`) includes a settings object (`UserSettings`) and arbitrary UI configuration (`settings.ui`), the endpoint exposes other users&#39; sensitive configuration to any channel participant.</p> <p>Practically, a regular user who participates in a DM or group can call `/api/v1/channels/{id}/members` and receive other members&#39; settings, including admin-only details such as webhook notification URLs and tool server configuration, including credential fields like `settings.ui.toolServers[].key`. These values are not returned by the normal user profile endpoints (e.g., `/api/v1/users/{user_id}/info`).</p> <p>### PoC</p> <p>1. Start a local Open WebUI instance 2. Log in as admin and in the Admin Panel, go to Settings -&gt; General and check *Channels (Beta)*, then press Save. 3. Create a low-privilege user in the Users tab 4. Click o…</p> <p><strong>Affected:</strong> PyPI: open-webui</p> <p>### Summary</p> <p>The channel members endpoint serializes and returns **full user models** for channel participants, including settings objects. A normal user in a DM can retrieve admin-only sensitive configuration such as webhook URLs and tool server key material (`settings.ui.toolServers[].key`), which is not available via standard user info APIs.</p> <p>### Details</p> <p>The endpoint GET `/api/v1/channels/{id}/members` returns the full serialized user model for every member in the channel. In both the DM and non-DM code paths, the handler constructs the response with `[UserModelResponse(**user.model_dump(), is_active=...)]` and returns it as the users list. Because `UserModel` (`models/users.py`) includes a settings object (`UserSettings`) and arbitrary UI configuration (`settings.ui`), the endpoint exposes other users&#39; sensitive configuration to any channel participant.</p> <p>Practically, a regular user who participates in a DM or group can call `/api/v1/channels/{id}/members` and receive other members&#39; settings, including admin-only details such as webhook notification URLs and tool server configuration, including credential fields like `settings.ui.toolServers[].key`. These values are not returned by the normal user profile endpoints (e.g., `/api/v1/users/{user_id}/info`).</p> <p>### PoC</p> <p>1. Start a local Open WebUI instance 2. Log in as admin and in the Admin Panel, go to Settings -&gt; General and check *Channels (Beta)*, then press Save. 3. Create a low-privilege user in the Users tab 4. Click o…</p> https://vulnerability.circl.lu/vuln/ghsa-gh7p-78x6-jw6m https://vulnerability.circl.lu/vuln/pysec-2026-3598 <p><strong>Affected:</strong> PyPI: open-webui</p> <p>### Summary</p> <p>The channel members endpoint serializes and returns **full user models** for channel participants, including settings objects. A normal user in a DM can retrieve admin-only sensitive configuration such as webhook URLs and tool server key material (`settings.ui.toolServers[].key`), which is not available via standard user info APIs.</p> <p>### Details</p> <p>The endpoint GET `/api/v1/channels/{id}/members` returns the full serialized user model for every member in the channel. In both the DM and non-DM code paths, the handler constructs the response with `[UserModelResponse(**user.model_dump(), is_active=...)]` and returns it as the users list. Because `UserModel` (`models/users.py`) includes a settings object (`UserSettings`) and arbitrary UI configuration (`settings.ui`), the endpoint exposes other users&#39; sensitive configuration to any channel participant.</p> <p>Practically, a regular user who participates in a DM or group can call `/api/v1/channels/{id}/members` and receive other members&#39; settings, including admin-only details such as webhook notification URLs and tool server configuration, including credential fields like `settings.ui.toolServers[].key`. These values are not returned by the normal user profile endpoints (e.g., `/api/v1/users/{user_id}/info`).</p> <p>### PoC</p> <p>1. Start a local Open WebUI instance 2. Log in as admin and in the Admin Panel, go to Settings -&gt; General and check *Channels (Beta)*, then press Save. 3. Create a low-privilege user in the Users tab 4. Click o…</p> <p><strong>Affected:</strong> PyPI: open-webui</p> <p>### Summary</p> <p>The channel members endpoint serializes and returns **full user models** for channel participants, including settings objects. A normal user in a DM can retrieve admin-only sensitive configuration such as webhook URLs and tool server key material (`settings.ui.toolServers[].key`), which is not available via standard user info APIs.</p> <p>### Details</p> <p>The endpoint GET `/api/v1/channels/{id}/members` returns the full serialized user model for every member in the channel. In both the DM and non-DM code paths, the handler constructs the response with `[UserModelResponse(**user.model_dump(), is_active=...)]` and returns it as the users list. Because `UserModel` (`models/users.py`) includes a settings object (`UserSettings`) and arbitrary UI configuration (`settings.ui`), the endpoint exposes other users&#39; sensitive configuration to any channel participant.</p> <p>Practically, a regular user who participates in a DM or group can call `/api/v1/channels/{id}/members` and receive other members&#39; settings, including admin-only details such as webhook notification URLs and tool server configuration, including credential fields like `settings.ui.toolServers[].key`. These values are not returned by the normal user profile endpoints (e.g., `/api/v1/users/{user_id}/info`).</p> <p>### PoC</p> <p>1. Start a local Open WebUI instance 2. Log in as admin and in the Admin Panel, go to Settings -&gt; General and check *Channels (Beta)*, then press Save. 3. Create a low-privilege user in the Users tab 4. Click o…</p> https://vulnerability.circl.lu/vuln/pysec-2026-3598