CVE-2026-109293Proof of concept (PoC) published · CISA
Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint
CVSS score
7.1
EPSS probability
%0.3
Risk score
0.0
Published
3 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.1
CVE-2026-87016
Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite
O
Patch verifiedEPSS %1
7.5
CVE-2026-87011
Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout
O
Patch verifiedEPSS %1
8.1
CVE-2026-70482
Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client
O
Patch verifiedEPSS %1
8.1
CVE-2026-70494
Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder
O
Patch verifiedEPSS %1
6.5
CVE-2026-88000
Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree
O
Patch verifiedEPSS %1
6.5
CVE-2026-70493
Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrophically
O
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-109293"