Open WebUI 0.9.6 ships with incremental knowledge base sync and RAG ACL fix

Open WebUI 0.9.6 is out. The headline addition is an official knowledge base sync companion tool, oikb, which hooks into the release's new incremental sync support. It keeps a knowledge base in sync with a local directory, GitHub repo, S3 bucket, Confluence space, or any of more than 40 other sources, uploading only new and changed files. Local directories can now be synced into a knowledge base in one action. [1]

The same release deprecates the peewee migration layer, and the commit message notes that "Peewee migrations are no longer needed for any version >= 0.3.6" because the Alembic init migration already creates the equivalent schema. The PR also removes dead peewee connection wrappers and standardizes os.environ.get calls to os.getenv. [2]

Two bug fixes deserve attention. First, a fix ensures that a stale ENABLE_SIGNUP config no longer blocks the first-admin signup. On a fresh install with zero users, the mandatory "Create Admin Account" onboarding screen previously hit a 403 ACCESS_PROHIBITED when the config was backed by Redis or the config row survived a partial database wipe. [3] Second, the static credentials OAuth flow now reads scopes from the Protected Resource Metadata document (RFC 9728) instead of relying on provider default scopes, which broke providers like GitHub that default to minimal public-only access. [4]

Also fixed: a RAG ACL vulnerability where collection ACL accepted any unknown name as a legacy collection, and in Milvus multi-tenancy mode interpolated it into the Milvus expression. A crafted name could turn the filter into a tautology and return every tenant's chunks. All collection names are now validated to reject unsafe characters. [5]