CVE-2026-109299

Versions of Open WebUI from 0.9.0 before 0.11.4 are vulnerable to a Denial of Service (DoS) attack due to insufficient validation of recurrence rules. Authenticated users with automations permissions can submit unsatisfiable rules, such as "February 30th," to the automations create or update endp...