open-webui

mirror of https://github.com/open-webui/open-webui.git synced 2026-07-10 04:20:44 +02:00

Files

Classic298 9a3eea6448 fix: bind prompt history/version ops to the authorized prompt (#25056 )

The history diff, delete, and version-restore routes authorize the URL
prompt_id but then act on a caller-supplied history/version id without
checking it belongs to that prompt (IDOR). Filter by prompt_id in
compute_diff and delete_history_entry, and reject a cross-prompt version_id
in update_prompt_version.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-06-01 12:07:52 -07:00