CVE-2026-59222: Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials

July 24, 2026 (updated August 13, 2026)

The channel members endpoint serializes and returns full user models for channel participants, including settings objects. A normal user in a DM can retrieve admin-only sensitive configuration such as webhook URLs and tool server key material (settings.ui.toolServers[].key), which is not available via standard user info APIs.

References

github.com/advisories/GHSA-gh7p-78x6-jw6m
github.com/open-webui/open-webui/commit/fbcdcf146b99b5002705060a8243eee769108f9e
github.com/open-webui/open-webui/releases/tag/v0.10.0
github.com/open-webui/open-webui/security/advisories/GHSA-gh7p-78x6-jw6m
nvd.nist.gov/vuln/detail/CVE-2026-59222

Code Behaviors & Features

Detect and mitigate CVE-2026-59222 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →