{"items":[{"id":"NVI-00015246","kind":"vulnerability","title":"Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder","revision":1,"unknowns":["Customer inventory, deployment, reachability and exploitation have not been inspected."],"lifecycle":"active","identifiers":["GHSA-3cg5-48j3-v4gv","CVE-2026-70494"],"plain_summary":"GitHub lists this reviewed advisory for open-webui. Published version ranges and source prerequisites are shown below; this is not an inspection of a visitor’s application.","review_status":"source_listed","control_topics":[],"public_actions":[{"summary":"Identify the exact component and deployed version, examine the linked publisher’s conditions, and retain evidence of any mitigation.","source_ids":["sr-4888cf287ade720c1f6a67611b4a0d82"],"action_type":"investigate","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null}],"schema_version":"1.1.0","source_metrics":[{"kind":"CVSS","as_of":"2026-08-04T20:58:12.000Z","value":"8.1 high","meaning":"GitHub source severity; exploitability and local consequence require separate evidence.","source_id":"sr-4888cf287ade720c1f6a67611b4a0d82"}],"why_it_matters":"Published affected context helps an owner decide what evidence to gather. This report has not examined your application.","related_sources":[{"id":"sr-4888cf287ade720c1f6a67611b4a0d82","url":"https://github.com/advisories/GHSA-3cg5-48j3-v4gv","basis":"vendor_advisory","notes":"GitHub Advisory Database; CC-BY-4.0. Each advisory links its original attribution. Null normalizes fields.","title":"GHSA-3cg5-48j3-v4gv","publisher":"GitHub Advisory Database","observed_at":"2026-11-03T09:58:09.980Z"}],"affected_context":[{"certainty":"source_listed","source_ids":["sr-4888cf287ade720c1f6a67611b4a0d82"],"technology":"open-webui","known_exclusions":[],"conditions_summary":"## Summary\nA user granted write access to a shared chat folder could permanently delete chats and messages belonging to the folder's owner. Deleting a folder cascades into the owner's chats and the entire subfolder subtree, and the deletion handler required only write access on subfolders instead of ownership. Root folders were restricted to the owner or an admin, subfolders were not.\n\n## Preconditions\nThe Folders Sharing permission (`user.permissions.sharing.folders`) must be enabled; it is off by default. The victim must have shared a folder with the attacker at write access. `features.folders` and the `chat.delete` permission are enabled by default and are both required. Deployments that leave folder sharing disabled are not affected, and neither are single-user instances.\n\n## Impact\nPermanent, irreversible destruction of another user's chat history within and beneath a shared folder. With `delete_contents=false` the same request instead force-moved the owner's chats out of the folder, an unauthorized relocation rather than a deletion. The write grant on the shared root folder is inherited by every descendant, so the attacker could destroy subfolders that were never explicitly s","public_affected_ranges":[">= 0.10.0, < 0.11.0"]}],"null_published_at":"2026-11-03T10:03:26.564Z","source_updated_at":"2026-08-04T20:58:12.000Z","source_disclosed_at":"2026-08-04T20:58:12.000Z","is_synthetic_fixture":false,"null_last_reviewed_at":null,"public_change_summary":"First indexed by Null; source disclosure date is shown separately.","null_first_observed_at":"2026-11-03T09:58:09.980Z"}],"next_cursor":null,"snapshot_revision":"42594"}