mirror of
https://github.com/open-webui/open-webui.git
synced 2026-05-06 19:08:59 -05:00
[GH-ISSUE #20465] issue: Image Thumbnails 401 errors #57859
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @atnjqt on GitHub (Jan 7, 2026).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/20465
Open WebUI Image Thumbnails failing to load with 401 errors
Expected Behavior
We have noticed that on moving to version v0.6.43 (and perhaps as early as v0.6.41) the image thumbnails are not loading properly on Open-WebUI. The console log shows various 401 errors for fetching images.
Actual Behavior
Navigating manually to URLs https://<SITE_URL>/api/v1/models/model/profile/image shows
{"detail":"Not authenticated"}. In the UI the image thumbnails are broken:Same with use account profile images:
Steps to Reproduce
Upgraded per usual from v0.6.3x to x0.6.4x
Logs & Screenshots
Console logs show 401 errors for model and image thumbnails.
Additional Information
No response
@owui-terminator[bot] commented on GitHub (Jan 7, 2026):
🔍 Similar Issues Found
I found some existing issues that might be related to this one. Please check if any of these are duplicates or contain helpful solutions:
#20237 issue: Image editing stopped working
by tomasloksa • Dec 29, 2025 •
bug,confirmed issue#20436 issue: image generation cannot finish normally
by lywbh • Jan 07, 2026 •
bug#20091 issue: image is regarded as binary in temp chat
by funnycups • Dec 22, 2025 •
bug#19215 issue:Server Failed opening Admin > Settings > Images Panel
by fordinator • Nov 16, 2025 •
bug#19187 issue: Image generation menu gone.
by calebrio02 • Nov 14, 2025 •
bugShow 5 more related issues
#19246 issue: Access /admin/settings/images (Server connection failed)
by plitc • Nov 17, 2025 •
bug#19496 issue: 500 internal server error appears in v0.6.40
by cloudtuotuo • Nov 26, 2025 •
bug#19451 issue: Images with gpt-image-1 ERROR: No connection adapters were found
by 3keyallen3 • Nov 25, 2025 •
bug#19438 issue: Icon loading regression
by JoelShepard • Nov 24, 2025 •
bug#18995 issue: image generation and edition doesn’t work on temporary chats
by futureshield • Nov 06, 2025 •
bug💡 Tips:
This comment was generated automatically by a bot. Please react with a 👍 if this comment was helpful, or a 👎 if it was not.
@atnjqt commented on GitHub (Jan 7, 2026):
The bot is confusing this issue with image generation using the tool -- this issue is about an issue with fetching internal resources like model and user account image thumbnails
@atnjqt commented on GitHub (Jan 7, 2026):
I suspect this is perhaps related to image tags now using credentials for
crossorigin="use-credentials"a7271532f8/src/lib/components/workspace/Models.svelte (L466-L470)@silentoplayz commented on GitHub (Jan 7, 2026):
I am unable to reproduce this issue on the latest
devbranch. This issue has likely been fixed bybb821ab654on thedevbranch as well, so the issue should likely be solved already (and will be solved for most users using themainbranch in the next version release).@atnjqt commented on GitHub (Jan 7, 2026):
Thanks for getting back -- and admittedly I cut corners this likely is of course related to my proxying setup for which I did not provide sufficient details.
@atnjqt commented on GitHub (Jan 13, 2026):
Pinging back here @silentoplayz as upgrading to v0.7.2 release did not resolve this. I'm pretty sure this was introduced around v0.6.41.
But yes links like
/api/v1/models/model/profile/image?id=gpt-5return Not authenticated even though I am logged into the application.@atnjqt commented on GitHub (Jan 13, 2026):
Notably in the User Settings > Account my custom profile image does actually show (though the URL is a
data:image/jpeg;base64and not a path on the API) whereas the URL to/api/v1/users/06e52cf3-7ffb-410b-96c8-60bed6a28b9c/profile/imageshows Not Authenticated@Classic298 commented on GitHub (Jan 13, 2026):
i cannot reproduce, model images always worked for me except on local dev setups but i dont configure them properly - saying you should investigate network issues and configuration options i.e. env vars like CORS
@atnjqt commented on GitHub (Jan 13, 2026):
Thanks for the reply @Classic298 and yes I believe the issue is with the frontend browser requesting resources from the API but not sending credentials to the backend to authenticate. Inspecting the browser console would reveal CORS errors if this was a cross origin issue, but it's 401 unauthorized returned by the backend.
Nothing changed on my proxy setup between versions 0.6.41 and 0.7.x so I suspect it's something with how Open-WebUI is requesting img assets from the backend. Again I don't mean to suggest my custom proxy setup is supported, but regardless it is odd this stopped working. Docker logs confirm the uvicorn backend returns 401 Forbidden
@atnjqt commented on GitHub (Jan 13, 2026):
Okay I did some more due diligence here and this is referenced in the release notes for v0.6.37 (https://github.com/open-webui/open-webui/releases/tag/v0.6.37)
@atnjqt commented on GitHub (Jan 13, 2026):
This obviously isn't crucial to get the thumbnail images loading again as chat functionality isn't impacted. But I did at least think worthwhile to raise as an issue as I suspect something about v0.6.37 release isn't properly authenticating API keys to images for models or user accounts.
@Classic298 commented on GitHub (Jan 13, 2026):
unfortunately as long as I cannot reproduce it i cannot work on a fix
@silentoplayz commented on GitHub (Jan 14, 2026):
I am sometimes able to reproduce something close to the reported issue (or perhaps it's the same issue, only dressed up differently) on the
devbranch of Open WebUI from mySuperadminrole account.Instead of seeing something like
{"detail":"Not authenticated"}when I visit a URL that failed the GET request (as reported by @atnjqt), I see{"detail":"401 Unauthorized"}instead.BUT, this issue is TEMPORARY and may have something to do with the way OWUI caches images.
I logged into a user account in a new container tab in Firefox and model images loaded fine. Accessing the same URL resulted in being able to see the model's avatar image as expected. The simple act of logging into another account in another tab seemed to be enough to solve this temporary issue, before the issue eventually swings back around again when it decides to.
@CristianoYL commented on GitHub (Feb 7, 2026):
I ran into the same issue post 0.6.41 and I think I have a rough idea on why and how to reproduce it. As @atnjqt mentioned, it has something to do with the reverse proxy.
If I change my nginx config from
proxy_set_header Host $host;toproxy_set_header Host localhost;it would work. However, this is not an ideal fix. Given that it used to work, maybe there's some change in the backend's allowed host header config?@atnjqt commented on GitHub (Feb 13, 2026):
@CristianoYL curious to know what authentication mechanism you're using. In my case I have a somewhat hacky setup to use Shibboleth & Apache as a reverse proxy to serve trusted headers (https://docs.openwebui.com/features/auth/sso#trusted-header) to an Open-WebUI container. I've got another personal setup which is using OIDC with reverse proxy so perhaps this is something with how I'm (incorrectly) exposing those custom trusted headers
@atnjqt commented on GitHub (Feb 13, 2026):
I'll need to eventually migrate our hosts to the OIDC setup given it's much cleaner & better supported and can share back if this resolves. But yeah this one has been confusing -- like either someone about reverse proxy setups, auth headers, or some previous persistent config value baked into my settings
@atnjqt commented on GitHub (Feb 13, 2026):
Alright I solved it, and predictably, this was user error in configuring the proxy layer.
Specifically the following configuration was breaking the thumbnail images. Commenting this out in my Apache configuration immediately resolved this.
ProxyPassReverseCookiePath / /ws/socket.io/@atnjqt commented on GitHub (Feb 13, 2026):
some good lessons learned here, and for anyone struggling I would recommend taking a database backup, then rerunning your app with persistent configurations disabled (what is clearly marked as step 1 in the troubleshooting here: https://docs.openwebui.com/getting-started/env-configuration/#troubleshooting-ignored-environment-variables-%EF%B8%8F).
From there you can more scientifically make configuration changes with confidence, which lead me to recreating my apache config from scratch. Best all!