An authorization bypass vulnerability in Open WebUI versions prior to 0.9.5 allows authenticated attackers to compromise sensitive data and integrity.

This is an authorization bypass vulnerability (CWE-639) occurring within the application's access control logic. The flaw allows a low-privileged authenticated user to manipulate user-controlled keys, effectively bypassing authorization checks.

The vulnerability carries a CVSS score of 8.1, reflecting a high risk to confidentiality and integrity. Successful exploitation allows an attacker to bypass security controls, potentially leading to unauthorized access to sensitive AI data or modification of platform configurations, which could result in significant operational disruption and data breach.

Immediate Action: Update the Open WebUI package to version 0.9.5 or later immediately.

Proactive Monitoring: Review application access logs for unusual patterns involving key-related API calls or unauthorized privilege escalations.

Compensating Controls: Implement strict network segmentation for the self-hosted platform and ensure that access to the management interface is restricted to authorized personnel via VPN or Zero Trust controls.

Public Exploit Available: Unknown

Given the High severity score and the existence of a proof-of-concept, organizations running Open WebUI must prioritize patching to version 0.9.5. Failure to address this vulnerability increases the risk of unauthorized access and data manipulation by internal or compromised accounts.