CVE-2026-45387CWE-200

Open WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt leakage)

Medium · published May 15, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
22.8
In the wild
Unconfirmed
What it is

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, when setting model permissions so that a group has read access to it, intending for other users to use it, those users also can read the model's system prompt. However users may consider their system prompt confidential, so this is considered a security issue. This vulnerability is fixed in 0.9.5.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00311 · 22.8th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2026-05-15T20:32Z
EPSS history
Timeline
  • 15 MAY 20:32Z
    Open WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt leakage)
    cvelistv5