AI agent vulnerability · Open WebUI

CVE-2024-7041: open-webui Insecure Direct Object Reference (IDOR) vulnerability

mediumCVSS 4.0 5.7 · 3.0 6.5GHSA-xcvc-5hgv-phqg

An Insecure Direct Object Reference (IDOR) vulnerability exists in open-webui/open-webui version v0.3.8. The vulnerability occurs in the API endpoint http://0.0.0.0:3000/api/v1/memories/{id}/update, where the decentralization design is flawed, allowing attackers to edit other users' memories without proper authorization.

Published Oct 9, 2024 · Updated Oct 15, 2025

Affected packages

open-webui

Ecosystem: PyPI
Affected: <= 0.3.8
Fixed in: No patched version yet
Check: pip show open-webui

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

An Insecure Direct Object Reference (IDOR) vulnerability exists in open-webui/open-webui version v0.3.8. The vulnerability occurs in the API endpoint http://0.0.0.0:3000/api/v1/memories/{id}/update, where the decentralization design is flawed, allowing attackers to edit other users' memories without proper authorization.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Open WebUI vulnerabilities

All Open WebUI entries