# CVE-2026-59714: Open WebUI cross-channel message overwrite in chat completion API

Source: https://junglewise.ai/threats/cve-2026-59714-open-webui-cross-channel-message-overwrite-in-chat-completion-api  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-13. Updated: 2026-07-24  
License: CC BY 4.0 with a link back

CVE-2026-59714 · Severity: high · CVSS 7.1 · Published 2026-08-13

An authenticated user can overwrite messages in any chat channel, including private and direct messages they do not have permission to access. This allows an attacker to change the content of existing messages while making it appear as though the original author wrote them, potentially leading to misinformation or impersonation within the platform.

Technologies: [open-webui (PyPI)](https://junglewise.ai/threats/technologies/open-webui). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2026-59714 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-59714 being exploited in the wild.

**How severe is CVE-2026-59714?** High severity, with a CVSS score of 7.1, published 13 August 2026.

**Which products and versions are affected?** open-webui (PyPI) >= 0.9.5, < 0.10.0, ECOSYSTEM:introduced=0.9.5,fixed=0.10.0.

**Is there a fix for CVE-2026-59714?** Yes. open-webui (PyPI): upgrade to 0.10.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-59714 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-59714?** Check whether you run open-webui (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- open-webui (PyPI): upgrade to 0.10.0 or later

  ```sh
  pip install "open-webui>=0.10.0"
  ```


## Technical details

A missing authorization check in the chat completion API allows authenticated users to overwrite messages across different channels. When a request uses a 'channel:'-prefixed chat_id, the application skips ownership verification and passes user-supplied message IDs directly to a database update function. This function, `_make_channel_emitter`, performs updates based on the primary key without verifying if the message belongs to the specified channel or if the user has access to it. This affects both single-model requests and multimodel requests using the `message_ids` map. The vulnerability is patched in version 0.10.0 by implementing per-entry validation and a fail-closed emitter that verifies channel ownership before writing.

## Affected products

- Open WebUI open-webui >= 0.9.5, < 0.10.0

## Identifiers

- CVE-2026-59714
- GHSA-x2ff-v5v8-m75m
- PYSEC-2026-3605

## Timeline

- 2026-07-02: disclosed: Initial disclosure on GitHub
- 2026-07-24: advisory: GitHub Advisory published
- 2026-07-24: patched: Fix confirmed in version 0.10.0

## References

- [https://api.github.com/users/sfwani](https://api.github.com/users/sfwani)
- [https://github.com/sfwani](https://github.com/sfwani)
- [https://api.github.com/users/sfwani/gists%7B/gist_id%7D](https://api.github.com/users/sfwani/gists%7B/gist_id%7D)
- [https://api.github.com/users/sfwani/repos](https://api.github.com/users/sfwani/repos)
- [https://avatars.githubusercontent.com/u/128927952?v=4](https://avatars.githubusercontent.com/u/128927952?v=4)
- [https://api.github.com/users/sfwani/events%7B/privacy%7D](https://api.github.com/users/sfwani/events%7B/privacy%7D)

## Related threats

- [Open WebUI OAuth token exchange authorization bypass](https://junglewise.ai/threats/cve-2026-88006-open-webui-oauth-token-exchange-authorization-bypass)
- [Open WebUI OAuth token exchange authorization bypass](https://junglewise.ai/threats/cve-2026-88005-open-webui-oauth-token-exchange-authorization-bypass)
- [Open WebUI infinite loop denial of service in chat history reconstruction](https://junglewise.ai/threats/cve-2026-88002-open-webui-infinite-loop-denial-of-service-in-chat-history)
- [Open WebUI server-side request forgery via unvalidated HTTP redirects](https://junglewise.ai/threats/cve-2026-88001-open-webui-server-side-request-forgery-via-unvalidated-http)
- [Open WebUI denial of service via cyclic chat tree message deletion](https://junglewise.ai/threats/cve-2026-88000-open-webui-denial-of-service-via-cyclic-chat-tree-message)