CVE Feed

    Dashboard / CVE / CVE-2026-87015

    CVE-2026-87015

    Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 until 0.11.1, backend/open_webui/utils/tools.py captured a cookie jar from the enclosing connection loop instead of binding it to each external tool callable. When multiple tool servers were attached and a session or system OAuth connection was processed last, a request to a different server configured for bearer authentication could include the calling user's Open WebUI session cookies, allowing that server's operator to reuse the session and take over the account. This issue is fixed in version 0.11.1.

    Published:Sep 9, 2026
    Last Modified:Sep 15, 2026
    EPS:Sep 9, 2026
    EPSS Score:0.0028
    CVSS Score:6.8

    Affected Products

    Vendor
    Open-webui
    Product
    Open-webui
    Vendor
    Openwebui
    Product
    Open Webui

    Exploits

    https://github.com/open-webui/open-webui/security/advisories/GHSA-p78m-89r6-pgf7https://github.com/open-webui/open-webui/security/advisories/GHSA-p78m-89r6-pgf7

    Related CVEs

    CVE-2026-109297 (CVSS 7.1) — Open WebUI 0.11.0 before 0.11.4 contains a denial of service vulnerability in the automation recurrence-rule v…
    CVE-2026-109291 (CVSS 8.5) — Open WebUI from 0.6.33 before 0.11.4 contains a cross-site scripting vulnerability that allows authenticated u…
    CVE-2026-109290 (CVSS 8.4) — Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelt…
    CVE-2026-109289 (CVSS 5.3) — Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated u…
    CVE-2026-109287 (CVSS 5.3) — Open WebUI from 0.9.6 before 0.11.4 contains an authorization flaw where the knowledge base file listing does …
    CVE-2026-109285 (CVSS 2.3) — Open WebUI from 0.6.0 before 0.11.4 contains an improper access control vulnerability in has_access_to_file th…
    CVE-2026-109284 (CVSS 5.3) — Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler…
    CVE-2026-109283 (CVSS 5.3) — Open WebUI from 0.11.1 before 0.11.4 contains an authorization bypass in the OAuth token exchange endpoint, wh…
    CVE-2026-88006 (CVSS 6.5) — Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.1,…
    CVE-2026-88005 (CVSS 6.5) — Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.9.0, …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High