CVE-2026-44562

The record

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the POST /api/v1/models/import endpoint allows users with the workspace.models_import permission to overwrite any existing model in the database, regardless of ownership. When an imported model's ID matches an existing model, the endpoint merges the attacker's payload over the existing model data and writes it to the database with no ownership or access grant validation. Additionally, filter_allowed_access_grants is never called, bypassing the access grant restrictions enforced on all other model mutation endpoints. This vulnerability is fixed in 0.9.0.

Affected packages

Related vulnerabilities

• CVE-2026-87913 A missing S3 bucket ownership verification in the AWS Security Agent MCP server before… CWE-283
• CVE-2026-87912 A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon… CWE-283
• CVE-2026-85781 Unverified ownership of a storage access point in the volume deletion component of the… CWE-283
• CVE-2026-9745 IBM Netezza Software 11.3.0.3 through Interim Fix 002 has operations that are performed… CWE-283
• CVE-2026-54467 On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform before 00d1b3e, mailbox… CWE-283
• CVE-2026-15599 Unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research… CWE-283
• CVE-2026-44707 Chatwoot is a customer engagement suite. CWE-283
• CVE-2026-40337 The Sentry kernel is a high security level micro-kernel implementation made for high… CWE-283