116560 matches found
CVE-2026-67858
creationtimestamp| type| source ---|---|--- 2026-08-04 23:00:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msc4joirhy2n...
CVE-2026-67620
creationtimestamp| type| source ---|---|--- 2026-08-04 23:00:02+00:00| seen| https://t.me/GithubRedTeam/96659 2026-08-05 00:00:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96659 2026-08-05 05:00:10+00:00| seen| Telegram/8aloBXQPHHfouGKf0EgG60bQLDnPnRmnq1pCP7sMVPUrMUc 2026-08-0...
CVE-2026-18817
creationtimestamp| type| source ---|---|--- 2026-08-04 22:44:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2e6gnr3bwti6t...
CVE-2026-70594
creationtimestamp| type| source ---|---|--- 2026-08-04 22:36:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6f6e3y6mttsbe 2026-08-05 01:31:27+00:00| seen| https://gist.github.com/alon710/a8f899d9b938031c01419f5cf3be4d0e...
GHSA-XM43-3M56-W3WF
creationtimestamp| type| source ---|---|--- 2026-08-04 22:31:36+00:00| seen| https://gist.github.com/alon710/206e14659b338e0afd8d846fac0809f6 2026-08-05 00:00:39+00:00| seen| https://gist.github.com/alon710/206e14659b338e0afd8d846fac0809f6...
CVE-2026-70593
creationtimestamp| type| source ---|---|--- 2026-08-04 22:30:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/iw3rld4msreml 2026-08-05 02:31:21+00:00| seen| https://gist.github.com/alon710/8b519f2c594fb49b15bc37a85db39cf9...
CVE-2026-18816
creationtimestamp| type| source ---|---|--- 2026-08-04 22:24:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jfs3fmlt77amm...
CVE-2026-16793
creationtimestamp| type| source ---|---|--- 2026-08-04 22:21:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msc2dixf3i2n...
CVE-2026-45100
creationtimestamp| type| source ---|---|--- 2026-08-04 22:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbzwjdqcj2z...
CVE-2026-18813
creationtimestamp| type| source ---|---|--- 2026-08-04 21:49:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2lkjejcezmnlb...
GHSA-3CG5-48J3-V4GV
creationtimestamp| type| source ---|---|--- 2026-08-04 21:31:22+00:00| seen| https://gist.github.com/alon710/e57220ec033758e1c7ba8d20ade18b9d...
CVE-2026-66902
creationtimestamp| type| source ---|---|--- 2026-08-04 21:24:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/5jerlnuteddya 2026-08-05 20:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msedshg2v22h 2026-08-06 12:32:03+00:00| seen|...
CVE-2026-66901
creationtimestamp| type| source ---|---|--- 2026-08-04 21:22:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3iwqm2chk7oin...
CVE-2026-70491
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. In 0.10.2 and earlier, the GET /api/v1/tools/, GET /api/v1/tools/list, and GET /api/v1/tools/id/id endpoints in backend/openwebui/routers/tools.py returned full Python tool source to authenticated non-admin...
CVE-2026-45538
creationtimestamp| type| source ---|---|--- 2026-08-04 21:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbwosyvzx2h...
CVE-2025-29296
creationtimestamp| type| source ---|---|--- 2026-08-04 21:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbwhogkt22l...
Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints
Summary A workspace tool shared with a read grant returned its full Python source to the recipient. Any authenticated non-admin who could use a shared tool could also read its source, including any user on the instance when a tool was shared publicly. Source is meant to be a writer-only tier: the...
CVE-2026-70491 Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. In 0.10.2 and earlier, the GET /api/v1/tools/, GET /api/v1/tools/list, and GET /api/v1/tools/id/id endpoints in backend/openwebui/routers/tools.py returned full Python tool source to authenticated non-admin...
CVE-2026-70491
Open WebUI vulnerability CVE-2026-70491 affects the self-hosted Open WebUI platform. In versions up to 0.10.2, the GET endpoints /api/v1/tools/, /api/v1/tools/list, and /api/v1/tools/id/{id} exposed full Python tool source to authenticated non-admin read-only users due to the interaction between ...