github-starred/open-webui
2
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-05-07 03:18:23 -05:00
Code Issues 1.3k Packages Projects Releases 126 Wiki Activity

[GH-ISSUE #23387] Admin panel: profile_image_url validation rejects its own paths, blocks user profile saves (v0.8.11) #58631

New Issue
Closed
opened 2026-05-05 23:35:55 -05:00 by GiteaMirror · 1 comment
GiteaMirror commented 2026-05-05 23:35:55 -05:00
Owner
Copy Link

Originally created by @ataraxiaone on GitHub (Apr 3, 2026).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/23387

Bug Description

The admin panel user management page cannot save user profiles in v0.8.11. The profile_image_url field's validation rejects URLs that OWUI itself generates (e.g., /api/v1/users/{id}/profile/image), making it impossible to update any user field (including role changes) through the admin UI.

Steps to Reproduce

  1. Deploy OpenWebUI v0.8.11 (ghcr.io/open-webui/open-webui:v0.8.11)
  2. Go to Admin Panel → Users
  3. Click on any user to edit their profile
  4. Change any field (e.g., role from "pending" to "user")
  5. Click Save

Expected Behavior

User profile saves successfully with the updated field.

Actual Behavior

Save fails with a validation error on the profile_image_url field. The validation appears to reject OWUI's own internal image paths as invalid URLs.

Workaround

Use the REST API directly to update user fields:

curl -X POST "https://your-owui-instance/api/v1/users/{user_id}/update" \
  -H "Authorization: Bearer $API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"role": "user"}'

Environment

  • OpenWebUI version: v0.8.11 (Docker: ghcr.io/open-webui/open-webui:v0.8.11)
  • Deployment: ECS Fargate (also reproducible in standard Docker)
  • Database: PostgreSQL 16.8
  • Browser: Chrome 135, Safari 18

Additional Context

This also affects creating users via the admin API with a profile_image_url set to an external URL (e.g., Google profile pictures). The API rejects the Google avatar URL, requiring an empty string to be passed instead.

Originally created by @ataraxiaone on GitHub (Apr 3, 2026). Original GitHub issue: https://github.com/open-webui/open-webui/issues/23387 ## Bug Description The admin panel user management page cannot save user profiles in v0.8.11. The `profile_image_url` field's validation rejects URLs that OWUI itself generates (e.g., `/api/v1/users/{id}/profile/image`), making it impossible to update any user field (including role changes) through the admin UI. ## Steps to Reproduce 1. Deploy OpenWebUI v0.8.11 (ghcr.io/open-webui/open-webui:v0.8.11) 2. Go to Admin Panel → Users 3. Click on any user to edit their profile 4. Change any field (e.g., role from "pending" to "user") 5. Click Save ## Expected Behavior User profile saves successfully with the updated field. ## Actual Behavior Save fails with a validation error on the `profile_image_url` field. The validation appears to reject OWUI's own internal image paths as invalid URLs. ## Workaround Use the REST API directly to update user fields: ```bash curl -X POST "https://your-owui-instance/api/v1/users/{user_id}/update" \ -H "Authorization: Bearer $API_KEY" \ -H "Content-Type: application/json" \ -d '{"role": "user"}' ``` ## Environment - OpenWebUI version: v0.8.11 (Docker: ghcr.io/open-webui/open-webui:v0.8.11) - Deployment: ECS Fargate (also reproducible in standard Docker) - Database: PostgreSQL 16.8 - Browser: Chrome 135, Safari 18 ## Additional Context This also affects creating users via the admin API with a `profile_image_url` set to an external URL (e.g., Google profile pictures). The API rejects the Google avatar URL, requiring an empty string to be passed instead.
GiteaMirror added the bug label 2026-05-05 23:35:55 -05:00
GiteaMirror commented 2026-05-05 23:35:59 -05:00
Author
Owner
Copy Link

@pr-validator-bot commented on GitHub (Apr 3, 2026):

⚠️ Missing Issue Title Prefix

@ataraxiaone, your issue title is missing a prefix (e.g., bug:, feat:, docs:).

Please update your issue title to include one of the following prefixes:

  • bug: Bug report or error you've encountered
  • feat: Feature request or enhancement suggestion
  • docs: Documentation issue or improvement request
  • question: Question about usage or functionality
  • help: Request for help or support

Example: bug: Login fails when using special characters in password

<!-- gh-comment-id:4184887435 --> @pr-validator-bot commented on GitHub (Apr 3, 2026): # ⚠️ Missing Issue Title Prefix @ataraxiaone, your issue title is missing a prefix (e.g., `bug:`, `feat:`, `docs:`). Please update your issue title to include one of the following prefixes: - **bug**: Bug report or error you've encountered - **feat**: Feature request or enhancement suggestion - **docs**: Documentation issue or improvement request - **question**: Question about usage or functionality - **help**: Request for help or support Example: `bug: Login fails when using special characters in password`
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
confirmed
confirmed issue
core
documentation
enhancement
good first issue
help wanted
non-core
pull-request
Mirrored from GitHub Pull Request
 python
question
testing wanted
No Label bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#58631
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?