[GH-ISSUE #12690] security: Private Prompts in Workspace are visible to all users #16684

New Issue

GiteaMirror · 2026-04-19T22:34:06-05:00

GiteaMirror commented

2026-04-19 22:34:06 -05:00

Originally created by @Classic298 on GitHub (Apr 10, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/12690

Check Existing Issues

I have searched the existing issues and discussions.
I am using the latest version of Open WebUI.

Installation Method

Pip Install

Open WebUI Version

0.6.2

Ollama Version (if applicable)

No response

Operating System

Debian 12

Browser (if applicable)

No response

Confirmation

I have read and followed all instructions in README.md.
I am using the latest version of both Open WebUI and Ollama.
I have included the browser console logs.
I have included the Docker container logs.
I have listed steps to reproduce the bug in detail.

Expected Behavior

When a prompt is saved in the workspace and the prompt is saved as a private prompt, it remains private and is not available to all users in the chat interface by accessing the stored prompts with the / command.

Actual Behavior

All prompts, even when stored as a private prompt, are available to all users in the chat interface. By writing / all the available prompts get listed and can be accessed by anyone

Steps to Reproduce

As a normal user, go to workspace
Create a new prompt - make sure to select 'private' for the permissions OR have the admin disable the public sharing permission altogether
Save the prompt
Ask another user to enter / into their chat interface and observe the full list of all prompts being shown, even those of other users.

Logs & Screenshots

Browser Logs not applicable

Additional Information

No response

Originally created by @Classic298 on GitHub (Apr 10, 2025). Original GitHub issue: https://github.com/open-webui/open-webui/issues/12690 ### Check Existing Issues - [x] I have searched the existing issues and discussions. - [x] I am using the latest version of Open WebUI. ### Installation Method Pip Install ### Open WebUI Version 0.6.2 ### Ollama Version (if applicable) _No response_ ### Operating System Debian 12 ### Browser (if applicable) _No response_ ### Confirmation - [x] I have read and followed all instructions in `README.md`. - [x] I am using the latest version of **both** Open WebUI and Ollama. - [x] I have included the browser console logs. - [x] I have included the Docker container logs. - [x] I have listed steps to reproduce the bug in detail. ### Expected Behavior When a prompt is saved in the workspace and the prompt is saved as a **private prompt**, it remains private and is not available to all users in the chat interface by accessing the stored prompts with the `/` command. ### Actual Behavior All prompts, even when stored as a private prompt, are available to all users in the chat interface. By writing `/` all the available prompts get listed and can be accessed by anyone ### Steps to Reproduce 1. As a normal user, go to workspace 2. Create a new prompt - make sure to select 'private' for the permissions OR have the admin disable the public sharing permission altogether 3. Save the prompt 4. Ask another user to enter `/` into their chat interface and observe the full list of all prompts being shown, even those of other users. ### Logs & Screenshots Browser Logs not applicable ### Additional Information _No response_

GiteaMirror added the bug label 2026-04-19 22:34:06 -05:00

GiteaMirror closed this issue

2026-04-19 22:34:07 -05:00

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/open-webui#16684