With native tools enabled, a signed-in Open WebUI user who knew another user's file ID could read indexed content through request-local model knowledge. The AI-assisted change removed the query's owner check. The repair filters supplied files using the authenticated user's access.

@@ -1829,11 +1829,11 @@                         collection_names.append(item_id)                  elif item_type == "file":                     # Individual file - use file-{id} as collection name                     file = Files.get_file_by_id(item_id)-                    if file and (user_role == "admin" or file.user_id == user_id):+                    if file:                         collection_names.append(f"file-{item_id}")                  elif item_type == "note":

                     # Note - always return full content as context                     note = Notes.get_note_by_id(item_id)

@@ -1036,5 +1036,16 @@+async def _set_direct_model(request: Request, model_item: dict, user) -> None:+    model_meta = (model_item.get('info') or {}).get('meta') or {}+    knowledge_items = model_meta.get('knowledge')+    if knowledge_items:+        from open_webui.utils.access_control.files import get_accessible_folder_files++        model_meta['knowledge'] = await get_accessible_folder_files(knowledge_items, user)+    request.state.direct = True+    request.state.model = model_item+

+ @app.post('/api/chat/completions') @app.post('/api/v1/chat/completions')  # Experimental: Compatibility with OpenAI API async def chat_completion(     request: Request,     form_data: dict,