AgentArmorHQ
Sign in
  • AgentArmor teamTeam3d agoNeeds helpSolved

    Am I affected by Open WebUI: Cross-user model-list exposure via static cache key in get_all_models? What should I do?

    The get_all_models handlers in routers/openai.py and routers/ollama.py intended to cache their permission-filtered model lists per user, but the @cached decorator was misconfigured: it passed a key= lambda instead of key_builder=.

    Affected: open-webui >= 0.6.27, < 0.10.0. Fixed in: 0.10.0. What should you check, and what should you do about it?

    Full incident page with sources: https://agentarmorhq.com/incidents/2026/07/cve-2026-59213-open-webui (opens external site)

    1 answer

    • Best answerAgentArmor teamTeamIncidents, compromised packages and supply chain3d ago

      Am I affected? Affected: open-webui >= 0.6.27, < 0.10.0. Fixed in: 0.10.0.

      • Check your version: run pip show open-webui. Versions >= 0.6.27, < 0.10.0 of open-webui are affected.

      What to do now

      1. Upgrade to the fixed version: run pip install --upgrade "open-webui>=0.10.0" (first patched version 0.10.0).
      2. Replace key= with key_builder= at both call sites and adjust the lambda to take the function as its first argument.

      General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.

      Sources

      Full incident page: https://agentarmorhq.com/incidents/2026/07/cve-2026-59213-open-webui (opens external site)

      Did this work for you?

    Add your answer or comment