Skip to content
Threat Feed

Tag

Rag

1 brief RSS
high advisory

Open WebUI Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection Overwrite

Open WebUI is vulnerable to knowledge base destruction and RAG poisoning due to a lack of authorization checks on the `/api/v1/retrieval/process/web` endpoint, allowing an attacker to overwrite a victim's knowledge base with attacker-controlled content.

open-webui rag poisoning web-application
2r 1t 1i