PT-2026-110713 · Git+1 · Open-Webui
CVSS v4.0
5.3
Medium
| Vector | AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Open WebUI versions prior to 0.11.4
Description
Authenticated users can access disabled model provider backends by providing an explicit backend index. This occurs on Ollama and OpenAI-compatible listing routes, where the index can be passed as a path segment or query parameter. This allows attackers to trigger requests that include configured API keys, read version strings, and enumerate connections.
Recommendations
Update to version 0.11.4 or later.
Exploit
Fix
IDOR
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Open-Webui