https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 13:39:29 +0000 https://db.gcve.eu/vuln/cve-2026-54006 <p><strong>Affected:</strong> open-webui</p> <p>Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, POST /api/v1/calendars/events/{event_id}/update validates that the caller has write access to the calendar the event currently belongs to, but does not validate the destination calendar_id supplied in the request body. The model layer then persists the new calendar_id unconditionally. A regular user-role account can therefore create an event in their own calendar and immediately move it into any other user&#39;s calendar whose ID they know — bypassing the authorization check that create_event correctly performs. This vulnerability is fixed in 0.9.6.</p> <p><strong>Affected:</strong> open-webui</p> <p>Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, POST /api/v1/calendars/events/{event_id}/update validates that the caller has write access to the calendar the event currently belongs to, but does not validate the destination calendar_id supplied in the request body. The model layer then persists the new calendar_id unconditionally. A regular user-role account can therefore create an event in their own calendar and immediately move it into any other user&#39;s calendar whose ID they know — bypassing the authorization check that create_event correctly performs. This vulnerability is fixed in 0.9.6.</p> https://db.gcve.eu/vuln/cve-2026-54006 https://db.gcve.eu/vuln/ghsa-f3g7-59qc-pqg6 <p><strong>Affected:</strong> PyPI: open-webui</p> <p>### Summary</p> <p>`POST /api/v1/calendars/events/{event_id}/update` validates that the caller has **write** access to the calendar the event *currently* belongs to, but does not validate the **destination** `calendar_id` supplied in the request body. The model layer then persists the new `calendar_id` unconditionally.</p> <p>A regular `user`-role account can therefore create an event in their own calendar and immediately move it into any other user&#39;s calendar whose ID they know — bypassing the authorization check that `create_event` correctly performs. This is reachable on **default configuration**: `ENABLE_CALENDAR` and `USER_PERMISSIONS_FEATURES_CALENDAR` both default to `True`.</p> <p>### Details ### Sink — missing destination check</p> <p>`backend/open_webui/routers/calendar.py:283-297`</p> <p>```python @router.post(&#39;/events/{event_id}/update&#39;, response_model=CalendarEventModel) async def update_event( request: Request, event_id: str, form_data: CalendarEventUpdateForm, user: UserModel = Depends(get_verified_user) ): await check_calendar_permission(request, user) event = await CalendarEvents.get_event_by_id(event_id) if not event: raise HTTPException(status_code=404, detail=&#39;Event not found&#39;)</p> <p>await _check_calendar_access(event.calendar_id, user, &#39;write&#39;) # ← SOURCE only</p> <p>updated = await CalendarEvents.update_event_by_id(event_id, form_data) # ← writes form_data.calendar_id ... ```</p> <p>`backend/open_webui/models/calendar.py:658-693` (`update_event_by_id`)</p> <p>``…</p> <p><strong>Affected:</strong> PyPI: open-webui</p> <p>### Summary</p> <p>`POST /api/v1/calendars/events/{event_id}/update` validates that the caller has **write** access to the calendar the event *currently* belongs to, but does not validate the **destination** `calendar_id` supplied in the request body. The model layer then persists the new `calendar_id` unconditionally.</p> <p>A regular `user`-role account can therefore create an event in their own calendar and immediately move it into any other user&#39;s calendar whose ID they know — bypassing the authorization check that `create_event` correctly performs. This is reachable on **default configuration**: `ENABLE_CALENDAR` and `USER_PERMISSIONS_FEATURES_CALENDAR` both default to `True`.</p> <p>### Details ### Sink — missing destination check</p> <p>`backend/open_webui/routers/calendar.py:283-297`</p> <p>```python @router.post(&#39;/events/{event_id}/update&#39;, response_model=CalendarEventModel) async def update_event( request: Request, event_id: str, form_data: CalendarEventUpdateForm, user: UserModel = Depends(get_verified_user) ): await check_calendar_permission(request, user) event = await CalendarEvents.get_event_by_id(event_id) if not event: raise HTTPException(status_code=404, detail=&#39;Event not found&#39;)</p> <p>await _check_calendar_access(event.calendar_id, user, &#39;write&#39;) # ← SOURCE only</p> <p>updated = await CalendarEvents.update_event_by_id(event_id, form_data) # ← writes form_data.calendar_id ... ```</p> <p>`backend/open_webui/models/calendar.py:658-693` (`update_event_by_id`)</p> <p>``…</p> https://db.gcve.eu/vuln/ghsa-f3g7-59qc-pqg6