PT-2026-56882 · Unknown · Open-Webui
CVE-2026-59216
·
Published
2026-07-09
·
Updated
2026-08-04
CVSS v3.1
9.0
Critical
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Open WebUI versions prior to 0.10.0
Description
Authenticated users can execute Python code or tools within another user's session. This occurs because the
get event call function delivers execute:python and execute:tool Socket.IO events to a client-supplied session id after verifying only that the session is connected. An attacker can obtain another user's socket ID via the ydoc:document:join event to perform this action.Recommendations
Update to version 0.10.0.
Exploit
Fix
DoS
Code Injection
Missing Authorization
Information Disclosure
IDOR
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Open-Webui