Executive brief
Open WebUI's folder management feature allows authenticated users to organize documents and conversations into folders. An attacker can exploit a missing validation in the folder-move operation to create a circular folder structure (a folder parented to itself). This causes subsequent folder operations to hang indefinitely in an infinite loop, consuming CPU and memory resources. While the application remains responsive to other users in the short term, sustained attacks or unattended instances degrade over hours, potentially leading to service unavailability.
Technical details
The vulnerability is a classic infinite loop triggered by missing cycle detection in a hierarchical data structure. The folder re-parent endpoint (`POST /api/v1/folders/{id}/update/parent`) fails to validate that the target parent is not the folder itself or one of its descendants. The folder model's subtree traversal functions (`DELETE` and `POST /read` endpoints) do not track visited folders, so they infinitely recurse when encountering a cycle. Attack preconditions: authentication required, folders feature enabled (default), user role must have folders permission (default true). An attacker needs only a standard account—no admin or special permissions. The fix in 0.11.1 adds validation to reject self-parenting with a 400 response, implements visited-set tracking in tree walks, and returns looped folders to root on next access. Affected versions: 0.10.0 through 0.11.0 (the subtree walk feature was introduced in 0.10.0).
Affected products
- open-webui Open WebUI 0.10.0 to 0.11.0
Timeline
- 2026-09-04: disclosed: Advisory published by GitHub (initial date)
- 2026-09-09: patched: Fix released in version 0.11.1
- 2026-09-10: advisory: GitHub Security Advisory GHSA-8r35-5x5r-hv74 published