CVE-2026-45351CWE-200

Open WebUI: Exposure of System Prompt to Regular User [Non-Admin]

Medium · published May 15, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
32.1
In the wild
Unconfirmed
What it is

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.9, when a regular user [non-admin] logs into the application, a http://IP:8080/api/models? web request is initiated by the application and in response, it reveals the system prompt of available models set by admin on models pages in workspace affecting the confidentiality of application. This vulnerability is fixed in 0.8.9.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00392 · 32.1th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2026-05-15T21:09Z
EPSS history
Timeline
  • 15 MAY 21:09Z
    Open WebUI: Exposure of System Prompt to Regular User [Non-Admin]
    cvelistv5