Open-WebUI Cross-Site Request Forgery Vulnerability Allowing Sensitive Actions via GET Requests

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in Open-WebUI version 0.3.8. Sensitive actions, such as deleting and resetting data, are executed using the GET method. This allows attackers to exploit CSRF by tricking users into performing these actions unintentionally, simply by visiting a malicious site or through top-level navigation. The vulnerable endpoints include /rag/api/v1/reset, /rag/api/v1/reset/db, /api/v1/memories/reset, and /rag/api/v1/reset/uploads. This vulnerability affects the application's availability and integrity.

Impact

Exploitation of this vulnerability allows for Cross-Site Request Forgery attacks, where an unaware user can be manipulated into performing sensitive actions, such as deleting or resetting data, thereby compromising the application's integrity and availability.