DEV Community

CVE Reports
CVE Reports

Posted on Originally published at cvereports.com

CVE-2026-87017: CVE-2026-87017: Broken Object-Level Authorization (BOLA) in Open WebUI Knowledge Search

#security #cve #cybersecurity

CVE-2026-87017: Broken Object-Level Authorization (BOLA) in Open WebUI Knowledge Search

Vulnerability ID: CVE-2026-87017
CVSS Score: 4.3
Published: 2026-09-10

A Broken Object-Level Authorization (BOLA) vulnerability exists in Open WebUI starting from version 0.7.0 up to (but not including) 0.11.1. The flaw resides in the platform's built-in knowledge search tool, which constructs metadata filters to scope database queries based on user permissions. However, eleven of the fifteen shipped vector database backends accepted these filters but silently ignored them, enabling authenticated users to retrieve and enumerate the metadata of inaccessible or private knowledge bases.

TL;DR

Eleven of fifteen vector database backends in Open WebUI ignored query filters, allowing authenticated users to enumerate metadata of unauthorized knowledge bases.

⚠️ Exploit Status: POC

Technical Details

  • CWE ID: CWE-863
  • Attack Vector: Network (AV:N)
  • CVSS v3.1 Score: 4.3 (Medium)
  • Exploit Status: Proof-of-Concept (PoC) / Known Root Cause
  • KEV Status: Not Listed
  • Affected Components: Vector database client adapters

Affected Systems

  • Open WebUI
  • Open WebUI: >= 0.7.0, < 0.11.1 (Fixed in: 0.11.1)

Code Analysis

Commit: 1d6d4e6

Explicitly translate, parse, and apply metadata filters across affected vector database backends.

Mitigation Strategies

  • Upgrade to Open WebUI version 0.11.1 or later.
  • Disable the built-in knowledge search tool for low-privilege roles.
  • Switch the active vector store backend to Chroma.
  • Isolate sensitive knowledge bases in dedicated vector database instances.

Remediation Steps:

  1. Identify the current running version of Open WebUI.
  2. If running any version from 0.7.0 through 0.11.0, prepare the environment for an upgrade.
  3. Pull the latest Docker image or update the Git repository to version 0.11.1.
  4. Restart the Open WebUI container or service.
  5. Verify the configuration of the active vector database backend.

References

Read the full report for CVE-2026-87017 on our website for more details including interactive diagrams and full exploit analysis.

Top comments (0)