CVE-2026-87016

    Dashboard / Vulnerabilities / CVE-2026-87016

    CVE-2026-87016

    Published: 9 Sept 2026Last Modified: 12 Sept 2026

    Summary: Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite

    Details: Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.41 until 0.11.1, get_user_by_oauth_sub and get_user_by_scim_external_id in backend/open_webui/models/users.py used JSON contains matching that compiled to SQL LIKE substring matching on SQLite. An OAuth subject containing percent or underscore wildcard characters could resolve to a different stored identity, potentially selecting an administrator account and issuing the attacker that account's session; PostgreSQL deployments were not affected. This issue is fixed in version 0.11.1.

    References: https://github.com/open-webui/open-webui/releases/tag/v0.11.1, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/87xxx/CVE-2026-87016.json, https://github.com/open-webui/open-webui/security/advisories/GHSA-wpmr-8h3q-fwj7, https://nvd.nist.gov/vuln/detail/CVE-2026-87016, https://github.com/open-webui/open-webui/commit/73c1f5806aeb6345dad5de8f5aa26d1f3d0bef80, https://github.com/open-webui/open-webui/pull/28624

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 6f1486ffd0cb288d0e21f41845361924e0d742b3
    Fixed -73c1f5806aeb6345dad5de8f5aa26d1f3d0bef80

    Affected versions

    v0.11.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-87016 | CVE-DB