CVE-2026-44550: Open WebUI's Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts

May 8, 2026 (updated May 15, 2026)

FolderForm uses model_config = ConfigDict(extra='allow'), which permits arbitrary fields to pass through Pydantic validation and be included in model_dump(exclude_unset=True). In insert_new_folder, the server-assigned user_id is placed at the start of the dict and then overwritten by the spread of form data:

References

github.com/advisories/GHSA-hr43-rjmr-7wmm
github.com/open-webui/open-webui/security/advisories/GHSA-hr43-rjmr-7wmm
nvd.nist.gov/vuln/detail/CVE-2026-44550

Code Behaviors & Features

Detect and mitigate CVE-2026-44550 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →