CVE-2026-45397: Open WebUI Vulnerable to Unauthenticated RAG Configuration Disclosure

May 14, 2026 (updated May 15, 2026)

GET /api/v1/retrieval/ returns live RAG pipeline configuration to any unauthenticated HTTP client. No Authorization header, cookie, or API key is required. Every adjacent endpoint on the same router (/embedding, /config) is correctly guarded by get_admin_user making this a targeted omission.

References

github.com/advisories/GHSA-65pg-qhhw-mxwg
github.com/open-webui/open-webui/releases/tag/v0.9.5
github.com/open-webui/open-webui/security/advisories/GHSA-65pg-qhhw-mxwg
nvd.nist.gov/vuln/detail/CVE-2026-45397

Code Behaviors & Features

Detect and mitigate CVE-2026-45397 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →