
CVE-2026-70481
Proof-of-concept exploit for an authorization flaw in Open WebUI that lets low-privileged users edit and delete other members' channel messages via…
api-security-testingauthentication-authorizationexploitation+4

Proof-of-concept exploit for an authorization flaw in Open WebUI that lets low-privileged users edit and delete other members' channel messages via…

Security Advisory: Insufficient Access Controls Allow for Unauthorized Room Deletion (Let's Chat)