Skip to content
Open WebUIGHSA-c7fq-p62p-wvpc

Open WebUI Has Improper Access Control Leading to Arbitrary Prompt Read

Medium4.3CVE-2024-7045 · Published Mar 20, 2025 · updated Jul 7, 2026

GitHub advisory

Affected versions

PackageAffectedFixed in
open-webui
PyPI
<= 0.3.8No fix yet
Details and references

In version v0.3.8 of open-webui/open-webui, improper access control vulnerabilities allow an attacker to view any prompts. The application does not verify whether the attacker is an administrator, allowing the attacker to directly call the /api/v1/prompts/ interface to retrieve all prompt information created by the admin, which includes the ID values. Subsequently, the attacker can exploit the /api/v1/prompts/command/{command_id} interface to obtain arbitrary prompt information.

CVSS 3.0
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Severity from
GitHub (reviewed advisory)
Weakness
CWE-1100, CWE-862
Also known as
CVE-2024-7045, PYSEC-2026-1727

More Open WebUI advisories

All Open WebUI
DateAdvisory
Mar 202025Open WebUI Uncontrolled Resource Consumption vulnerability
CVE-2024-12537High7.5no fix yet
Mar 202025Open WebUI Uncontrolled Resource Consumption vulnerability
CVE-2024-12534High7.5no fix yet
Mar 202025Open WebUI has vulnerable dependency on starlette via fastapi
GHSA-w466-2wfc-8g58High7.5no fix yet
Mar 202025Open WebUI Vulnerable to Cross-Site Scripting (XSS) via Chat File Upload
CVE-2024-7044Medium6.8no fix yet
Mar 202025Open WebUI Allows Arbitrary File Reading and Deletion
CVE-2024-7043High8.1no fix yet
Mar 202025Open WebUI Uncontrolled Resource Consumption vulnerability
CVE-2024-7036High7.5no fix yet

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.