CVE-2026-87015

Katalog CVE

CVSS 6.8 · Medium EPSS 0,48%

Kerentanan Insertion of Sensitive Information Into Sent Data pada openwebui open webui. Skor CVSS 3.1 6.8 (Medium) menurut github.com.

Deskripsi (NVD)

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 until 0.11.1, backend/open_webui/utils/tools.py captured a cookie jar from the enclosing connection loop instead of binding it to each external tool callable. When multiple tool servers were attached and a session or system OAuth connection was processed last, a request to a different server configured for bearer authentication could include the calling user's Open WebUI session cookies, allowing that server's operator to reuse the session and take over the account. This issue is fixed in version 0.11.1.

Rincian

Terbit di NVD

9 September 2026

Terakhir diubah

15 September 2026

Status NVD

Analyzed

CVSS 3.1

6.8 (Medium), sumber github.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-201: Insertion of Sensitive Information Into Sent Data

EPSS (30 hari)

0,48% peluang dieksploitasi; lebih tinggi dari 39,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/open-webui/open-webui/security/advisories/GHSA-p78m-89r6-pgf7 exploit · advisory vendor
• https://github.com/open-webui/open-webui/commit/cd9db21c5276807a2975ddba17cef369ad1114b7 patch
• https://github.com/open-webui/open-webui/pull/28630 issue tracking · patch
• https://github.com/open-webui/open-webui/releases/tag/v0.11.1 release notes