CVE-2026-59715
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
In Open WebUI from version 0.6.16 before 0.10.0, the Socket.IO server is configured with always_connect=True, and the ydoc:awareness:update and ydoc:document:leave handlers accept collaborative-document events without requiring an authenticated user, allowing unauthorized manipulation of document collaboration state.
Risk Assessment
An attacker can unauthorizedly modify shared documents in real-time, leading to data integrity breaches and potential information leakage.
Recommendation
Update Open WebUI to version 0.10.0 or later immediately, which fixes the issue by requiring authentication for Socket.IO events.
Original NVD description (English source)
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.16 before 0.10.0, the Socket.IO server is configured with always_connect=True. The ydoc:awareness:update and ydoc:document:leave Socket.IO handlers accepted collaborative-document events without requiring an authenticated user, allowing unauthorized manipulation of document collaboration state. This issue is fixed in version 0.10.0.