{
 "id": "AIR-2026-0759",
 "slug": "cve-2026-54012-open-webui-forged-model-meta-knowledge-enable",
 "title": "CVE-2026-54012: Open WebUI forged model meta.knowledge enables cross-user file access",
 "summary": "Open WebUI failed to verify ownership of referenced files stored in workspace model knowledge metadata. Malicious model owners could exploit this to read or delete private files belonging to other users.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Open WebUI"
 ],
 "incident_date": "2026-06-17",
 "incident_date_precision": "day",
 "first_reported": "2026-06-17",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-vjqm-6gcc-62cr",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-54012: Open WebUI: Forged model meta.knowledge allows cross-user file read and deletion",
   "published_at": "2026-06-17"
  },
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54012",
   "publisher": "NVD",
   "title": "CVE-2026-54012: Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.",
   "published_at": "2026-06-23"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-54012",
  "open-webui",
  "authorization"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}