{
 "id": "AIR-2026-0758",
 "slug": "cve-2026-54015-open-webui-prompt-history-idor-allows-cross-p",
 "title": "CVE-2026-54015: Open WebUI prompt history IDOR allows cross-prompt read and deletion",
 "summary": "Open WebUI prompt history endpoints omitted validation checking whether history rows belonged to the specified prompt. This IDOR flaw enabled unauthorized reading, restoring, and deletion of other prompts' history snapshots.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Open WebUI"
 ],
 "incident_date": "2026-06-17",
 "incident_date_precision": "day",
 "first_reported": "2026-06-17",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-4r4w-2wgp-w7cj",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-54015: Open WebUI Prompt history IDOR: unbound history_id allows cross-prompt read and deletion",
   "published_at": "2026-06-17"
  },
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54015",
   "publisher": "NVD",
   "title": "CVE-2026-54015: Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.",
   "published_at": "2026-06-23"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-54015",
  "open-webui",
  "idor"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}