CVE-2026-45350Disclosure(openwebui / open_webui)

LOWCVSS 7.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch openwebui open_webui systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, there is a vulnerability in chat completion API, which allows attackers to bypass tool restrictions, potentially enabling unauthorized actions or access. In the chat_completion API, the parameters tool_ids and tool_servers are supplied by the user. These parameters are used to create a tools_dict by the middleware. This is then used by get_tool_by_id to retrieve the appropriate tool. However, there is no checks in that ensures the user that uses the API has permission to use the tool, meaning that a user can invoke any server tool by supplying the correct tool_id or tool_servers parameters via the chat completion API. Moreover, the authentication token stored in the server would be used when invoking the tool, so the tool will be invoked with the server privilege. This vulnerability is fixed in 0.8.6.

openwebui CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

Exploit / PoC references

Weakness type (CWE)

CWE-862

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

open_webui

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-05-16); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

openwebui

Products

open_webui

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Disclosure

150.0%

Patch

150.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-45350

Classification over time

Date	Total	Labels

2026-05-16	1	Disclosure1
2026-05-29	1	Patch1

Full discourse2 posts

DFIR Lab@DFIR_Lab134d
Patch
🚨 HIGH severity CVE-2026-45350 (CVSS 7.1) affects Open WebUI <0.8.6. Attackers can bypass tool restrictions & execute unauthorized actions with server privileges via chat completion API. Patch immediately to 0.8.6+. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/596WaO5EbJ
Post summary
A high‑severity vulnerability, CVE‑2026-45350, in Open WebUI allows attackers to bypass tool restrictions and gain server‑level privileges via the chat completion API. Users are urged to upgrade to version 0.8.6 or later immediately.
0000044
31 followersView on X
CVE@CVEnew147d
Disclosure
CVE-2026-45350 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, there is a vulnerability in chat completion API, wh… https://www.cve.org/CVERecord?id=CVE-2026-45350
Post summary
The message announces a flaw in Open WebUI’s chat completion API (pre‑0.8.5) under CVE‑2026‑45350, without treatment of exploitation or mitigation details.
00000162
57.5K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	openwebui	open_webui	-	-	-

Explore more

Back to dashboard openwebui CVEs open_webui vulnerabilities