---
id: CVE-2026-109285
title: >-
  Open WebUI from 0.6.0 before 0.11.4 contains an improper access control
  vulnerability in has_access_to_file that lets former knowledge base
  collaborators keep file access via stale cached knowledge base references
summary: >-
  Open WebUI from 0.6.0 before 0.11.4 contains an improper access control
  vulnerability in has_access_to_file that lets former knowledge base
  collaborators keep file access via stale cached knowledge base references.
  Attackers with read or…
severity: medium
cvss: 5
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L'
cwe:
  - CWE-863
vendor: open-webui
product: open-webui
affected:
  - open-webui >= 0.6.0 < 0.11.4
published: '2026-10-12'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T15:55:45.630'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-109285'
references:
  - url: >-
      https://github.com/open-webui/open-webui/security/advisories/GHSA-9cxp-636w-4997
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/open-webui-0.6.0-before-0.11.4-improper-access-control-via-stale-file-metadata
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/open-webui/open-webui/security/advisories/GHSA-9cxp-636w-4997
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - cve.org
  - exploit-available
epss: 0.00242
epssPercentile: 0.1526
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-13T18:07:07.258448Z'
ingestedAt: '2026-10-12T18:00:08.188Z'
---

## Overview

Open WebUI from 0.6.0 before 0.11.4 contains an improper access control vulnerability in has_access_to_file that lets former knowledge base collaborators keep file access via stale cached knowledge base references. Attackers with read or write grants can download removed files through the file content endpoint or delete them, including from the owner's private knowledge bases.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.