CVE-2026-45351: Open WebUI Exposes System Prompt to Regular User [Non-Admin]

May 14, 2026 (updated May 19, 2026)

A regular user [non-admin] can view the system prompt of the model which is set by an admin.

References

github.com/advisories/GHSA-jh9g-8jqw-m2qx
github.com/open-webui/open-webui/releases/tag/v0.8.9
github.com/open-webui/open-webui/security/advisories/GHSA-jh9g-8jqw-m2qx
nvd.nist.gov/vuln/detail/CVE-2026-45351

Code Behaviors & Features

Detect and mitigate CVE-2026-45351 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →