{
 "id": "AIR-2026-0647",
 "slug": "cve-2026-44569-open-webui-insecure-message-access-and-author",
 "title": "CVE-2026-44569: Open WebUI insecure message access and authorization flaw",
 "summary": "Open WebUI suffers from an IDOR vulnerability in its channel message management system allowing unauthorized modification or deletion. The backend API fails to verify message ownership while validating channel access.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Open WebUI"
 ],
 "incident_date": "2026-05-11",
 "incident_date_precision": "day",
 "first_reported": "2026-05-11",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-jxwr-g6r6-j3fx",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-44569: Open WebUI's Insecure Message Access Breaks Authorization",
   "published_at": "2026-05-11"
  },
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44569",
   "publisher": "NVD",
   "title": "CVE-2026-44569: Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.",
   "published_at": "2026-05-15"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-44569",
  "open-webui",
  "idor"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}