Threats Tagged 'ghsa-h3ww-q6xx-w7x3'
View all threats tagged with 'ghsa-h3ww-q6xx-w7x3'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-h3ww-q6xx-w7x3'
Click on any threat for detailed analysis and mitigation recommendations
Open WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accounts (CVE-2026-45675)CVE-2026-45675 0 Open WebUI versions prior to 0.9.0 contain a race condition in the LDAP and OAuth authentication flows that allows multiple concurrent first-user logins to be assigned the admin role. This occurs because the role assignment checks if any users exist before inserting the new user, creating a time-of-check-time-of-use (TOCTOU) race window. The signup handler was patched to prevent this, but LDAP and OAuth paths were not fixed until version 0.9.0. Exploiting this flaw enables multiple users to gain administrator privileges simultaneously on a fresh instance. Join the discussion | GCVE Database | 05/14/2026, 20:28:46 UTC Added: 07/16/2026, 10:36:06 UTC |
Showing 1 to 1 of 1 result