PT-2026-67835

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.8.0 through 0.10.9 Description When the ENABLE OAUTH TOKEN EXCHANGE variable is set to True, the endpoint /oauth/provider/token/exchange also identified as POST /api/v1/auths/oauth/provider/token/exchange fails to verify...

CVE-2026-70491: Exposure of Sensitive Information to an Unauthorized Actor

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. In 0.10.2 and earlier, the GET /api/v1/tools/, GET /api/v1/tools/list, and GET /api/v1/tools/id/id endpoints in backend/openwebui/routers/tools.py returned full Python tool source to authenticated non-admin...

PT-2026-67834

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.5.0 through 0.10.9 Description In standard channels, the message update and delete handlers fail to verify if the caller is the original author of the message. Since write access is the same permission required to post a...

PT-2026-67844

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.11.0 Description An authenticated attacker can bypass URL validation to perform a DNS rebinding attack. The software validates hostnames by resolving them once to reject private, loopback, and link-local addresse...

PT-2026-67859

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.11.0 Description Authenticated non-admin users with read-only access can obtain the full Python source code of server-side tools shared with them. This occurs because the response models permitted extra fields,...

PT-2026-67904

Summary DELETE /api/v1/chats/id cancelled a chat's in-flight tasks before it checked whether the caller was allowed to delete that chat. Any authenticated user who knew another user's chat id could therefore abort that user's running model response, title generation or tag generation. The deletio...

PT-2026-67836

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.6 through 0.10.2 Description An issue exists where the DELETE /api/v1/chats/id endpoint cancels in-flight tasks before verifying if the caller has the necessary permissions to delete the chat. An authenticated user who...

PT-2026-67857

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.0 through 0.10.0 Description Automation recurrence parsing in backend/open webui/utils/automations.py anchors minutely and hourly rules to a fixed date of 2000-01-01. When calculating the next run, the system walks...

PT-2026-67858

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.8.8 through 0.10.9 Description The terminal WebSocket route in backend/open webui/routers/terminals.py fails to apply the verified-user role gate that is enforced on HTTP terminal routes. Specifically, the resolve...

PT-2026-67926

Summary A user with write access to one knowledge base could delete directories, and drop file embeddings, belonging to knowledge bases they do not control. The sync cleanup endpoint verified write access on the knowledge base named in the URL and then acted on the directory and file ids supplied...

PT-2026-67837

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.7.0 through 0.10.0 Description An authenticated user whose features.image generation permission has been revoked can still trigger image generation by sending a feature flag in a chat-completion request. The server fails ...

PT-2026-67924

Summary Open WebUI vetted user-supplied URLs by resolving the hostname once and rejecting private, loopback and link-local addresses, then let the HTTP client resolve that hostname again at connect time. An attacker who controls the authoritative DNS for a hostname they submit can answer with a...

Chromium: CVE-2026-17888 Insufficient validation of untrusted input in WebUI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-17888

An insufficient validation of untrusted input flaw was found in the WebUI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523720529...

SUSE CVE-2026-17888

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: Medium...

DEBIAN-CVE-2026-17888

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: Medium...

CVE-2026-17888

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: Medium...

CVE-2026-17888

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: Medium...

CVE-2026-17888

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: Medium...

CVE-2026-17888: Improper Input Validation

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: Medium...