CVE-2026-59222: CVE-2026-59222: Sensitive Data Exposure in Open WebUI Channels API

#security #cve #cybersecurity

CVE-2026-59222: Sensitive Data Exposure in Open WebUI Channels API

Vulnerability ID: CVE-2026-59222
CVSS Score: 6.5
Published: 2026-07-24

Open WebUI versions starting from 0.7.0 up to, but excluding, 0.10.0 are vulnerable to a sensitive data exposure flaw in the channels API. The GET /api/v1/channels/{id}/members endpoint exposes full user database representations, including private API keys and webhook configurations. This allows authenticated users to extract private credentials of other members within the same channel.

TL;DR

The Open WebUI channels member endpoint leaked full user profile configurations. This let any authenticated user inside a shared channel steal private external API keys and webhooks belonging to other members, including administrators.

Technical Details

CWE ID: CWE-200
Attack Vector: Network
CVSS: 6.5
EPSS: 0.00322
Impact: Confidentiality
Exploit Status: None
KEV Status: Not Listed

Affected Systems

Open WebUI
open-webui: >= 0.7.0, < 0.10.0 (Fixed in: 0.10.0)

Code Analysis

Commit: fbcdcf1

Refactor channel router to use strict ChannelMemberResponse schemas instead of dumping UserModelResponse

Mitigation Strategies

Restrict channel memberships to essential users only to reduce the exposure surface of sensitive configurations.
Deploy API gateway filtering to strip nested sensitive parameters like toolServers and key from JSON API responses.
Ensure developer pipelines require strict DTO definitions for API outputs rather than generic database models.

Remediation Steps:

Identify all Open WebUI deployments in the environment.
Pull the latest Docker image of Open WebUI version 0.10.0 or higher.
Apply the configuration update and restart the container to apply the fix.
Rotate any API keys or webhook secrets configured within Open WebUI that were accessible to non-admin users.

References

Read the full report for CVE-2026-59222 on our website for more details including interactive diagrams and full exploit analysis.

DEV Community