Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export… (CVE-2026-109293)

The vulnerability in Open WebUI (CVE-2026-109293) affects versions starting from 0.11.0 before 0.11.4. It allows authenticated users who are not administrators but have tool export permissions to access the GET /api/v1/tools/export endpoint. Through this endpoint, attackers can obtain the complete Python source code of tools shared with them in read-only mode. This source code may contain embedded API keys and credentials, leading to an information disclosure vulnerability classified under CWE-200. The CVSS 3.1 base score is 6.5, indicating a high severity with network attack vector, low attack complexity, and requiring privileges but no user interaction.

The vulnerability allows unauthorized disclosure of sensitive information such as embedded API keys and credentials within tool source code. This can lead to further compromise of systems or services relying on those credentials. The impact is limited to confidentiality; integrity and availability are not affected.

A fixed version is available starting from 0.11.4. Users should upgrade to version 0.11.4 or later to remediate this vulnerability. Since this is not a cloud service, remediation depends on applying the vendor's patch. Patch status is not explicitly confirmed in the input data, so users should verify the vendor advisory for the official fix and upgrade instructions.