Open WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to reach disabled model provider backends by… (CVE-2026-109296)
Description
Open WebUI versions prior to 0.11.4 have a missing authorization vulnerability that allows authenticated users to access disabled model provider backends by specifying an explicit backend index. This can be done via path segments or query parameters on Ollama and OpenAI-compatible listing routes, potentially exposing API keys, version strings, and connection enumerations.
CVSS v3.1
Score 4.3medium
Affected software
pkg:github/open-webui/open-webuiRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in Open WebUI before version 0.11.4 is due to missing authorization checks that permit authenticated users to reach disabled model provider backends by supplying an explicit backend index. Attackers can exploit this by passing the index as a path segment or query parameter on specific listing routes (Ollama and OpenAI-compatible), which triggers requests that carry configured API keys, disclose version strings, and allow enumeration of connections. This issue is tracked as CVE-2026-109296 and is classified under CWE-639 (Authorization Bypass Through User-Controlled Key).
Potential Impact
The vulnerability allows authenticated users to bypass intended access restrictions to disabled backends, potentially exposing sensitive information such as API keys and version details. However, the CVSS score of 4.3 (medium severity) indicates limited impact, with confidentiality affected but no integrity or availability impact. There are no known exploits in the wild.
Mitigation Recommendations
A fix is available in Open WebUI version 0.11.4. Users should upgrade to version 0.11.4 or later to remediate this vulnerability. Since no vendor advisory or patch link is provided, verify the patch status with official Open WebUI sources before deployment.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-32hx-qqmp-8j8q
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-109296"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6acd55492cdf04f656da84d1
Added to database: 10/12/2026, 21:46:49 UTC
Last enriched: 10/12/2026, 21:54:26 UTC
Last updated: 10/13/2026, 03:48:09 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.