CVE-2026-109297

The Open WebUI application versions 0.11.0 before 0.11.4 are vulnerable to a Denial of Service (DoS) attack via the automation recurrence-rule validator . The root cause is a discrepancy where the sub-daily frequency guard parses rule text more strictly than the underlying calendar library used f...