{"cve":"CVE-2026-44553","nvd":{"published":"2026-05-15T20:16:46.707","modified":"2026-06-17T10:50:46.860","status":"Modified","description":"Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, administrative role changes and user deletions do not iterate SESSION_POOL to disconnect affected sessions. As a result, a user whose admin role has been revoked retains admin privileges within their existing Socket.IO session for as long as they keep the connection alive (via automatic heartbeats). The gap is exclusive to the Socket.IO session cache. This vulnerability is fixed in 0.9.0.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","score":8.1},"cwes":["CWE-613"],"references":["https://github.com/open-webui/open-webui/security/advisories/GHSA-45m8-cpm2-3v65"],"products":["openwebui:open_webui"],"source":"nvd","synced_at":"2026-10-19T22:35:16.954578616+00:00"},"epss":{"cve":"CVE-2026-44553","score":0.00278,"percentile":0.20321,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-45m8-cpm2-3v65","url":"https://osv.dev/vulnerability/GHSA-45m8-cpm2-3v65","summary":"Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access","modified":"2026-07-13T16:42:32.564752735Z","packages":[{"ecosystem":"PyPI","name":"open-webui","purl":"pkg:pypi/open-webui","ranges":["<0.9.0"],"fixed":["0.9.0"]}]},{"id":"PYSEC-2026-2697","url":"https://osv.dev/vulnerability/PYSEC-2026-2697","summary":"Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access","modified":"2026-07-13T16:31:52.248316530Z","packages":[{"ecosystem":"PyPI","name":"open-webui","purl":"pkg:pypi/open-webui","ranges":["<0.9.0"],"fixed":["0.9.0"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}