CVE-2026-44560 Open WebUI: Unauthorized File and Knowledge Base Content Access via RAG Vector Search

What is CVE-2026-44560?

CVE-2026-44560 is a medium-severity vulnerability in Openwebui Open Webui, published on 15 May 2026.

Official description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the type: "file" (non-full-context), type: "text" with collection_name, and bare collection_name/collection_names paths in the get_sources_from_items function perform vector store queries without any authorization check, allowing users to extract content from files and knowledge bases they do not have access to. This vulnerability is fixed in 0.9.0.

Weakness: CWE-862

Which versions are affected by CVE-2026-44560?

3 open source packages ship an affected version, including open-webui. It affects 1 product.

Products include Openwebui Open Webui.

How do I fix CVE-2026-44560?

Upgrade open-webui to 0.9.0 or later.

Is CVE-2026-44560 being exploited?

There is no known exploitation of CVE-2026-44560 in the wild and no public exploit code.

Other vulnerabilities in Openwebui Open Webui

• CVE-2026-44551 Open WebUI: LDAP Empty Password Authentication Bypass Critical 9.1
• CVE-2026-56400 open-webui - Remote Code Execution via CORS Misconfiguration and Session Validation Critical 9.0
• CVE-2024-8017 Cross-site Scripting (XSS) in open-webui/open-webui Critical 9.0
• CVE-2026-45672 Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed High 8.8
• CVE-2026-87995 Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin High 8.7

All Openwebui Open Webui vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-h36f-rqpx-j5wx, PYSEC-2026-2729.