Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave)

GHSA-gmfw-g93r-vg53 · CVE-2026-59715 · PYSEC-2026-3599 · 갱신 2026. 8. 4.

생태계	패키지	수정 버전
PyPI	open-webui	0.10.0

Summary

The Socket.IO server is configured with always_connect=True (lines 78, 91 in backend/open_webui/socket/main.py) and the connect handler (line 329) never rejects unauthenticated connections. Two Ydoc event handlers have zero authentication checks, allowing unauthenticated clients to interact with collaborative document sessions.

Vulnerable Code

`ydoc:awareness:update` (line 741) — No auth check at all

@sio.on('ydoc:awareness:update')
async def yjs_awareness_update(sid, data):
    document_id = data['document_id']
    user_id = data.get('user_id', sid)
    update = data['update']
    # No SESSION_POOL check, no room membership check
    await sio.emit(
        'ydoc:awareness:update',
        {'document_id': document_id, 'user_id': user_id, 'update': update},
        room=f'doc_{document_id}',
        skip_sid=sid,
    )

`ydoc:document:leave` (line 711) — No auth check at all

@sio.on('ydoc:document:leave')
async def yjs_document_leave(sid, data):
    document_id = data['document_id']
    user_id = data.get('user_id', sid)
    # No auth check
    await YDOC_MANAGER.remove_user(document_id=document_id, user_id=sid)
    await sio.emit('ydoc:user:left',
        {'document_id': document_id, 'user_id': user_id},
        room=f'doc_{document_id}')

Root Cause: `always_connect=True` (line 78)

sio = socketio.AsyncServer(
    always_connect=True,   # Never rejects connections
    ...
)

The connect handler (line 329) adds authenticated users to SESSION_POOL but never returns False or raises an exception for unauthenticated connections.

Exploitation

An unauthenticated attacker connects via Socket.IO (no token needed)
The attacker emits ydoc:awareness:update with:
- document_id: a known/guessed note UUID (format: note:{uuid})
- user_id: spoofed to impersonate any user
- update: arbitrary awareness data (fake cursor positions, selections)
The fake awareness data is broadcast to all legitimate users in the document room
The attacker can also emit ydoc:document:leave with spoofed user_id to broadcast fake ydoc:user:left events

Impact

UI disruption: Fake cursor positions and user presence in collaborative editing sessions
User impersonation: Attacker can spoof any user_id in awareness updates
Resource exhaustion: Unlimited unauthenticated WebSocket connections maintained by the server

Note: Other Ydoc handlers (ydoc:document:join, ydoc:document:update, ydoc:document:state) correctly check SESSION_POOL membership.

Suggested Fix

Set always_connect=False or reject unauthenticated connections in the connect handler
Add SESSION_POOL checks to ydoc:awareness:update and ydoc:document:leave
Add room membership verification before broadcasting to document rooms

AI Disclosure (per Rule 11): AI (Claude) was used to assist with source code review, identifying potential vulnerability patterns, and drafting this report. The researcher directed the analysis, selected focus areas, and independently verified all findings against a running v0.8.12 Docker instance using real HTTP requests with two test accounts. The PoCs included are reproducible and were confirmed live before submission.

Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave)

Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave)

영향 받는 패키지

원문

Summary

Vulnerable Code

`ydoc:awareness:update` (line 741) — No auth check at all

`ydoc:document:leave` (line 711) — No auth check at all

Root Cause: `always_connect=True` (line 78)

Exploitation

Impact

Suggested Fix

출처

영향 받는 패키지

원문

Summary

Vulnerable Code

ydoc:awareness:update (line 741) — No auth check at all

ydoc:document:leave (line 711) — No auth check at all

Root Cause: always_connect=True (line 78)

Exploitation

Impact

Suggested Fix

출처

`ydoc:awareness:update` (line 741) — No auth check at all

`ydoc:document:leave` (line 711) — No auth check at all

Root Cause: `always_connect=True` (line 78)