CVE-2026-54022

The record

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, the ydoc:document:join Socket.IO handler checks note ownership only when the document_id starts with note: (colon). However, the YdocManager storage layer normalizes all document IDs by replacing colons with underscores (document_id.replace(":", "_")). An attacker can join a document room using note_<id> (underscore) instead of note:<id> (colon), bypassing the authorization check entirely while accessing the same underlying Yjs document. The server then returns the full document state, leaking the victim's private note contents. This vulnerability is fixed in 0.8.11.

Affected packages

Related vulnerabilities

• CVE-2026-114663 Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default… CWE-706
• CVE-2026-14288 GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before… CWE-706
• CVE-2026-92262 MariaDB server is a community developed fork of MySQL server. CWE-706
• CVE-2026-107822 MariaDB server is a community developed fork of MySQL server. CWE-706
• CVE-2026-92951 vm2 before 3.11.7 contains an incorrect authorization vulnerability in the external… CWE-706
• CVE-2026-87618 Incorrect reference resolution in Storage in Google Chrome on on Windows prior to… CWE-706
• CVE-2026-87613 Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36… CWE-706
• CVE-2026-87562 Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to… CWE-706