PT-2026-56882 · Unknown · Open-Webui

CVE-2026-59216

·

Published

2026-07-09

·

Updated

2026-08-04

CVSS v3.1

9.0

Critical

VectorAV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.10.0
Description Authenticated users can execute Python code or tools within another user's session. This occurs because the get event call function delivers execute:python and execute:tool Socket.IO events to a client-supplied session id after verifying only that the session is connected. An attacker can obtain another user's socket ID via the ydoc:document:join event to perform this action.
Recommendations Update to version 0.10.0.

Exploit

Fix

DoS

Code Injection

Missing Authorization

Information Disclosure

IDOR

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-59216
GHSA-74H3-CXQ7-VC5Q
PYSEC-2026-3592

Affected Products

Open-Webui