CVE-2026-87013: Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /api/v1/folders/{id}/update/parent allowed a user to place a folder under itself or one of its descendants, while the folder tree walks used by DELETE /api/v1/folders/{id} and POST /api/v1/folders/{id}/read did not track visited folder identifiers. An authenticated user could persist a parent cycle and start a request that consumed CPU and memory indefinitely, with the condition remaining stored until repaired. This issue is fixed in version 0.11.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Open WebUIto a version that resolves this vulnerability.Fixed in 0.11.1
Event History
Frequently Asked Questions
Which deployments are affected?
Open WebUI versions from 0.10.0 through versions before 0.11.1 are affected. Version 0.11.1 fixes the issue.
What access does an attacker need?
An attacker needs an authenticated Open WebUI account. They can use the folder parent update endpoint to make a folder its own parent or place it under one of its descendants.
What is the operational impact?
After storing a folder-parent cycle, the attacker can trigger folder delete or read operations that walk the cycle without tracking visited folders. The request can consume CPU and memory indefinitely, and the malformed cycle remains until it is repaired.
What should be done if upgrading is not immediately possible?
Repair any persisted folder parent cycles and prevent authenticated users from creating self-parent or descendant-parent relationships. The affected behavior is exposed through POST /api/v1/folders/{id}/update/parent and can be triggered through DELETE /api/v1/folders/{id} or POST /api/v1/folders/{id}/read.