CVE-2026-59216

CriticalCVSS 9.0/10Last modified Jul 13, 2026

Description

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, get_event_call delivered execute:python and execute:tool Socket.IO events to a client-supplied session_id after checking only that the session was connected, allowing authenticated users who learned another socket ID through ydoc:document:join to run code interpreter Python or tools in that user session. This issue is fixed in version 0.10.0.

Metrics

CVSS 3.1 9.0/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-94 CWE-200 CWE-639 CWE-862

Affected software

Vendor	Product	Versions
open-webui	open-webui	< 0.10.0

References

https://github.com/open-webui/open-webui/commit/386ac958144dbbbf0aa6e268070d72b681a318aaPatch
https://github.com/open-webui/open-webui/pull/25763Issue Tracking, Patch
https://github.com/open-webui/open-webui/releases/tag/v0.10.0Product, Release Notes
https://github.com/open-webui/open-webui/security/advisories/GHSA-74h3-cxq7-vc5qMitigation, Vendor Advisory
https://github.com/open-webui/open-webui/security/advisories/GHSA-74h3-cxq7-vc5qMitigation, Vendor Advisory

Timeline

Published: Jul 9, 2026
Last modified: Jul 13, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-592174.3Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, the file upload path accepted metadat CVE-2026-592185.3Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, the /api/v1/auths/signin endpoint loo CVE-2026-592197.1Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 before 0.10.0 with Redis configured, Socket CVE-2026-59225.9The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s webpage.CVE-2026-592206.5Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.2 before 0.10.0, the SKILL_MENTION_RE and str CVE-2026-592217.7Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 before 0.10.0, _sanitize_proxy_path in back CVE-2026-592226.5Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 before 0.10.0, GET /api/v1/channels//member CVE-2026-592234.3Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, WEB_FETCH_FILTER_LIST matching compar CVE-2026-592248.0Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, backend/open_webui/routers/terminals.CVE-2026-592256.3Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.12 before 0.10.0, an authenticated non-admin CVE-2026-592264.3Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 before 0.10.0, execute_automation rehydrate CVE-2026-592275.4Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.11 before 0.10.0, POST /api/v1/images/edit re