{
 "id": "AIR-2026-0526",
 "slug": "cve-2026-28788-open-webui-file-overwrite-vulnerability",
 "title": "CVE-2026-28788: Open WebUI File Overwrite Vulnerability",
 "summary": "A missing ownership check in Open WebUI's file batch processing endpoint allowed authenticated users to overwrite arbitrary files in shared knowledge bases. The manipulated files could subsequently poison RAG responses provided to LLM users.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln",
  "data_poisoning"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Open WebUI"
 ],
 "incident_date": "2026-03-27",
 "incident_date_precision": "day",
 "first_reported": "2026-03-27",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-jjp7-g2jw-wh3j",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-28788: Open WebUI's process_files_batch() endpoint missing ownership check, allows unauthorized file overwrite",
   "published_at": "2026-03-27"
  },
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28788",
   "publisher": "NVD",
   "title": "CVE-2026-28788: Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.",
   "published_at": "2026-03-27"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-28788",
  "open-webui",
  "rag"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}