Skip to content
Threat Feed

Tag

Model-Chaining

1 brief RSS
high advisory

Open WebUI Model Chaining Access Control Bypass

Open WebUI is vulnerable to an access control bypass due to improper model chaining, allowing a regular user to create a model that chains to a restricted base model and query it using the admin's API key, bypassing access restrictions.

open-webui access-control model-chaining privilege-escalation
2r 2t