Skip to content

CVE-2026-54022

is CVE-2026-54022real, exploitable, or a false positive? Here's the community verdict.

☆ Watch
Medium · CVSS 5.3CWE-706

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, the ydoc:document:join Socket.IO handler checks note ownership only when the document_id starts with note: (colon). However, the YdocManager storage layer normalizes all document IDs by replacing colons with underscores (document_id.replace(":", "_")). An attacker can join a document room using note_<id> (underscore) instead of note:<id> (colon), bypassing the authorization check entirely while accessing the same underlying Yjs document. The server then returns the full document state, leaking the victim's private note contents. This vulnerability is fixed in 0.8.11.

References

NVD MITRE CVE.org

Published

Embed this verdict
TruePositive verdict for CVE-2026-54022
Markdown
[![TruePositive verdict](https://www.truepositive.app/cve/CVE-2026-54022/badge.svg)](https://www.truepositive.app/cve/CVE-2026-54022)
HTML
<a href="https://www.truepositive.app/cve/CVE-2026-54022"><img src="https://www.truepositive.app/cve/CVE-2026-54022/badge.svg" alt="TruePositive verdict for CVE-2026-54022"></a>

Live badge that updates automatically as the community verdict changes.

Community ground truth

In your experience, is this finding real and exploitable?

0 verdicts
Not a real issue

No account needed. Anonymous verdicts post as an unverified signal. Log in to make yours verified and earn reputation.

Field notes & remediation

Verdicts are the quick signal. Notes are the evidence and fixes behind them.

No notes yet. Be the first to share what you saw, or a fix that worked.

    Add a field note or remediationoptional
    Note type

    What are you adding?

    Markdown supported · minimum 20 characters.

    Related CVEs

    Same weakness: CWE-706.