CVE-2026-54012: Open WebUI forged model meta.knowledge enables cross-user file access

# CVE-2026-54012: Open WebUI forged model meta.knowledge enables cross-user file access

https://gcdradar.vercel.app/incidents/cve-2026-54012-open-webui-forged-model-meta-knowledge-enable · AIR-2026-0759 · closed 2026-06-17

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2026-06-17
- AI role: Attack on AI
- Products: Open WebUI
- CVE ids: CVE-2026-54012
- CVSS: 7.1

## Summary

Open WebUI failed to verify ownership of referenced files stored in workspace model knowledge metadata. Malicious model owners could exploit this to read or delete private files belonging to other users.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-06-23: CVE-2026-54012: Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. (https://nvd.nist.gov/vuln/detail/CVE-2026-54012)
- 2026-06-17: CVE-2026-54012: Open WebUI: Forged model meta.knowledge allows cross-user file read and deletion (https://github.com/advisories/GHSA-vjqm-6gcc-62cr)

## Sources

- 2026-06-17 GitHub Advisory Database: CVE-2026-54012: Open WebUI: Forged model meta.knowledge allows cross-user file read and deletion https://github.com/advisories/GHSA-vjqm-6gcc-62cr
- 2026-06-23 NVD: CVE-2026-54012: Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. https://nvd.nist.gov/vuln/detail/CVE-2026-54012

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.