CVE-2026-59222— Open WebUI 成员接口暴露用户敏感凭证漏洞
Possible ATT&CK Techniques 1AI
T1530 · Data from Cloud StorageAffected Version Matrix 1
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| open-webui | open-webui | >= 0.7.0, < 0.10.0 | affected |
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-59222の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials
ソース: NVD (National Vulnerability Database)
脆弱性説明
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 before 0.10.0, GET /api/v1/channels//members returned full UserModelResponse objects for channel members, including settings.ui.toolServers[].key and webhook configuration, allowing a normal channel participant to retrieve other users’ sensitive settings. This issue is fixed in version 0.10.0.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
信息暴露
ソース: NVD (National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| open-webui | open-webui | >= 0.7.0, < 0.10.0 | - |
II. CVE-2026-59222の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-59222のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-59222 补丁与修复 (1)
- 🔗 refac · open-webui/open-webui@fbcdcf1 · GitHubx_refsource_MISC
CVE-2026-59222 厂商安全公告 (1)
CVE-2026-59222 厂商页面 (1)
Same Patch Batch · open-webui · 2026-07-09 · 17 CVEs total
| CVE-2026-59224 | 8.0 HIGH | Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the up |
| CVE-2026-59216 | 7.7 HIGH | Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event |
| CVE-2026-59221 | 7.7 HIGH | open-webui terminal proxy path traversal guard bypass via 9x encoded traversal |
| CVE-2026-59214 | 7.3 HIGH | Open WebUI: Stored web worker XSS via Pyodide |
| CVE-2026-59219 | 7.1 HIGH | Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout |
| CVE-2026-59220 | 6.5 MEDIUM | Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config |
| CVE-2026-59212 | 5.4 MEDIUM | Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delet |
| CVE-2026-59225 | 5.4 MEDIUM | Open WebUI: Arena task endpoints can bypass underlying model access controls |
| CVE-2026-59218 | 5.3 MEDIUM | Open WebUI: Account enumeration via observable login timing discrepancy |
| CVE-2026-59227 | 4.3 MEDIUM | Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-use |
| CVE-2026-59217 | 4.3 MEDIUM | Open WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check |
| CVE-2026-59223 | 4.3 MEDIUM | Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and no |
| CVE-2026-59213 | 3.5 LOW | Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocach |
| CVE-2026-59226 | 3.1 LOW | Open WebUI: Scheduled automations continue after pending-user deactivation and stored mode |
| CVE-2026-59715 | 3.1 LOW | Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awar |
| CVE-2026-59215 | 3.1 LOW | Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_ |
IV. 関連脆弱性
同じ製品: open-webui
- CVE-2026-59221
open-webui terminal proxy path traversal guard bypass via 9x - CVE-2026-59225
Open WebUI: Arena task endpoints can bypass underlying model - CVE-2026-59224
Open WebUI: Terminal proxy forwards a spoofable, integrity-u - CVE-2026-59212
Open WebUI: Model meta.knowledge read-only file access can b - CVE-2026-59223
Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter
同じベンダー: open-webui
- CVE-2026-59221
open-webui terminal proxy path traversal guard bypass via 9x - CVE-2026-59225
Open WebUI: Arena task endpoints can bypass underlying model - CVE-2026-59224
Open WebUI: Terminal proxy forwards a spoofable, integrity-u - CVE-2026-59212
Open WebUI: Model meta.knowledge read-only file access can b - CVE-2026-59223
Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter
同じ弱点: CWE-200
- CVE-2026-6801
Context Blog <= 1.3.5 - Unauthenticated Sensitive Informatio - CVE-2026-10865
Cost Calculator Builder <= 4.0.11 - Unauthenticated Sensitiv - CVE-2026-7544
Mux Video Uploader <= 1.1.4 - Authenticated (Subscriber+) In - CVE-2026-12426
Members <= 3.2.22 - Unauthenticated Sensitive Information Di - CVE-2026-55882
Tilt: Unauthenticated pprof debug endpoints on the Tilt HUD
V. CVE-2026-59222へのコメント
まだコメントはありません