CVE-2026-70483 | Open WebUI up to 0.10.x /api/v1/chats/{id} ID race condition

August 4, 2026 Yanac

A vulnerability labeled as problematic has been found in Open WebUI up to 0.10.x. This affects an unknown part of the file /api/v1/chats/{id}. Executing a manipulation of the argument ID can lead to race condition.

This vulnerability appears as CVE-2026-70483. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More