—

PYSEC-2026-1732

open-webui is Vulnerable to Incorrect Access Control

Quick fix

PYSEC-2026-1732 — open-webui: upgrade to the fixed version with the command below.

pip install --upgrade 'open-webui>=0.9.0'

Details

open-webui v0.6.33 is vulnerable to Incorrect Access Control. The API /api/tasks/stop/ directly accesses and cancels tasks without verifying user ownership, enabling attackers (a normal user) to stop arbitrary LLM response tasks.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / open-webui

Introduced in: 0 Fixed in: 0.9.0

Fix pip install --upgrade 'open-webui>=0.9.0'

References

https://nvd.nist.gov/vuln/detail/CVE-2025-63681 [ADVISORY]
https://github.com/TOAST-Research/pocs/blob/main/openwebui/arbitirary_task_stop/report.md [WEB]
https://github.com/open-webui/open-webui [PACKAGE]
https://github.com/open-webui/open-webui/blob/46ae3f4f5d7d4d706041bdae4ad2d802e568712b/backend/open_webui/main.py#L1652 [WEB]
https://pypi.org/project/open-webui [PACKAGE]
https://github.com/advisories/GHSA-frv8-gffc-37px [ADVISORY]
https://github.com/open-webui/open-webui/commit/e7ff4768f8ffe1924b4576381c9e45e8a64350e4 [FIX]