{"vulnerability": "CVE-2026-8701", "sightings": [{"uuid": "c9c26333-2408-48b5-bdf6-fc9e47460744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87011", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv4jwh7atj2z", "content": "\ud83d\udfe0 CVE-2026-87011 - High (7.5)\n\nOpen WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-87011/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-09T21:59:59.213980Z"}, {"uuid": "9e25c765-1253-410b-9d9f-1373b50b4103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87016", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv4ndzoauy24", "content": "\ud83d\udfe0 CVE-2026-87016 - High (8.1)\n\nOpen WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.41...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-87016/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-09T23:01:16.065269Z"}, {"uuid": "883aba7e-d093-4627-a67b-f60afaca7958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87017", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-pcvc-8vrv-8q6w", "content": "", "creation_timestamp": "2026-09-10T16:35:08.411593Z"}, {"uuid": "0bfa73fc-59f8-4d04-956a-913c112688d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87015", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-p78m-89r6-pgf7", "content": "", "creation_timestamp": "2026-09-10T22:35:03.561609Z"}, {"uuid": "c5d1e597-5435-4e7a-857d-c65c09ae5cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87016", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-wpmr-8h3q-fwj7", "content": "", "creation_timestamp": "2026-09-10T22:35:05.741380Z"}, {"uuid": "8cfc2dff-4bf2-4b48-ba80-f974f93df0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87011", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-3g9q-v48f-hh9w", "content": "", "creation_timestamp": "2026-09-11T00:35:33.569332Z"}, {"uuid": "6cc660c4-bf52-481b-9600-ea39af5bd12a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87012", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-v39v-59xw-j98g", "content": "", "creation_timestamp": "2026-09-11T00:35:36.268396Z"}, {"uuid": "a9c66237-9349-4de4-b48d-9aa849962f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87013", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-8r35-5x5r-hv74", "content": "", "creation_timestamp": "2026-09-11T00:35:38.608963Z"}, {"uuid": "34ac219f-ad07-48bf-957b-8c9dd27b2d7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87014", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-wjwr-xfp9-r66p", "content": "", "creation_timestamp": "2026-09-11T00:35:41.171568Z"}, {"uuid": "2abc5c47-aba9-451b-8325-62cc98f89882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87011", "type": "seen", "source": "https://gist.github.com/alon710/d61ce1f74a389eb9b11e0ada4e2c5671", "content": "# CVE-2026-87011: CVE-2026-87011: Denial of Service via Event-Loop Starvation in Open WebUI OIDC Back-Channel Logout\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-09-10\n> **Full Report:** https://cvereports.com/reports/CVE-2026-87011\n\n## Summary\nCVE-2026-87011 is a critical vulnerability in Open WebUI versions 0.9.0 through 0.11.0. It allows unauthenticated remote attackers to trigger a Denial of Service (DoS) by sending crafted tokens to the back-channel logout endpoint, causing synchronous network calls that block the single-worker ASGI event loop.\n\n## TL;DR\nUnauthenticated remote attackers can freeze Open WebUI instances by exploiting a synchronous blocking network call in the OIDC back-channel logout handler.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-405, CWE-770\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 7.5 (High)\n- **EPSS Score**: 0.00339 (0.34%)\n- **Exploit Status**: PoC mapped\n- **CISA KEV Status**: Not Listed\n- **Remediation**: Upgrade to v0.11.1 or disable back-channel logout\n\n## Affected Systems\n\n- Open WebUI\n- **Open WebUI**: >= 0.9.0, < 0.11.1 (Fixed in: `0.11.1`)\n\n## Mitigation\n\n- Upgrade Open WebUI to version 0.11.1 or higher\n- Set ENABLE_OAUTH_BACKCHANNEL_LOGOUT=false in environment configurations\n- Implement strict rate limiting on /oauth/backchannel-logout via reverse proxies\n\n**Remediation Steps:**\n1. Verify current Open WebUI version is between 0.9.0 and 0.11.0\n2. Deploy updated Docker image ghcr.io/open-webui/open-webui:v0.11.1\n3. If unable to upgrade immediately, set the environment variable ENABLE_OAUTH_BACKCHANNEL_LOGOUT to false\n4. Verify back-channel logout endpoint responds with 404 or is disabled after configuration change\n\n## References\n\n- [Official Fix Commit](https://github.com/open-webui/open-webui/commit/aeda6ff13a25d3b3ba1b303609f35382db22142c)\n- [GitHub Security Advisory GHSA-3g9q-v48f-hh9w](https://github.com/open-webui/open-webui/security/advisories/GHSA-3g9q-v48f-hh9w)\n- [Open WebUI v0.11.1 Release Notes](https://github.com/open-webui/open-webui/releases/tag/v0.11.1)\n- [NVD Entry for CVE-2026-87011](https://nvd.nist.gov/vuln/detail/CVE-2026-87011)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-87011) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-11T13:31:48.013055Z"}, {"uuid": "d86ab5ed-434d-458f-a79c-ee9335694508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87012", "type": "seen", "source": "https://gist.github.com/alon710/e350315aab7316ce10d2d2056b580adf", "content": "# CVE-2026-87012: CVE-2026-87012: Instance-Wide Denial of Service via Calendar Alert Metadata Type Confusion in Open WebUI\n\n> **CVSS Score:** 4.3\n> **Published:** 2026-09-10\n> **Full Report:** https://cvereports.com/reports/CVE-2026-87012\n\n## Summary\nOpen WebUI is a self-hosted AI platform. Versions 0.9.0 through 0.11.0 contain a denial-of-service vulnerability where an authenticated user can inject non-numeric values into calendar event alert metadata. The shared scheduler process fails to validate the type, leading to an unhandled TypeError that halts the execution of instance-wide alerts, suppressing notifications for all users.\n\n## TL;DR\nAn authenticated attacker can crash the shared Open WebUI background scheduler by sending non-numeric values in calendar event metadata, resulting in instance-wide suppression of all calendar alerts.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-1287, CWE-754\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 4.3 (Medium)\n- **EPSS Score**: 0.00268 (18.83% percentile)\n- **Impact**: Denial of Service (Instance-wide alert suppression)\n- **Exploit Status**: PoC concept, no public exploits\n- **KEV Status**: Not listed in CISA KEV\n\n## Affected Systems\n\n- Open WebUI self-hosted AI platforms\n- **Open WebUI**: >= 0.9.0, < 0.11.1 (Fixed in: `0.11.1`)\n\n## Mitigation\n\n- Upgrade Open WebUI to version 0.11.1 or higher\n- Implement write-path validation on API input payloads\n- Sanitize database entries using SQL query to strip non-numeric alert_minutes\n\n**Remediation Steps:**\n1. Identify running Open WebUI container\n2. Pull the latest official Docker image 'ghcr.io/open-webui/open-webui:v0.11.1'\n3. Restart the application to apply the changes\n4. Optionally audit database for legacy malformed calendar events\n\n## References\n\n- [GitHub Security Advisory GHSA-v39v-59xw-j98g](https://github.com/open-webui/open-webui/security/advisories/GHSA-v39v-59xw-j98g)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-87012) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-11T14:31:53.169596Z"}, {"uuid": "c9368bb3-12e4-415f-af04-851b0df43b65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87013", "type": "seen", "source": "https://gist.github.com/alon710/b936d0e8b1b08a24ad813407363272e8", "content": "# CVE-2026-87013: CVE-2026-87013: Denial of Service via Cyclic Folder Structures in Open WebUI\n\n> **CVSS Score:** 4.3\n> **Published:** 2026-09-10\n> **Full Report:** https://cvereports.com/reports/CVE-2026-87013\n\n## Summary\nAn authenticated denial of service vulnerability exists in Open WebUI versions 0.10.0 through 0.11.0. An attacker can update a folder's parent identifier to establish cyclic folder references, causing recursive tree-walking operations to execute infinitely, leading to CPU exhaustion and localized application denial of service.\n\n## TL;DR\nAuthenticated users can create self-referencing folder loops in Open WebUI, triggering an infinite recursion that consumes 100% CPU and causes a Denial of Service.\n\n## Technical Details\n\n- **CWE ID**: CWE-835\n- **Attack Vector**: Network\n- **CVSS Severity**: 4.3 (Medium)\n- **EPSS Score**: 0.00268 (Percentile: 18.84%)\n- **Impact**: Denial of Service (DoS) via Thread Exhaustion\n- **Exploit Status**: No Public PoC / No Active Exploitation\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Open WebUI\n- **open-webui**: >= 0.10.0, < 0.11.1 (Fixed in: `0.11.1`)\n\n## Mitigation\n\n- Upgrade Open WebUI to version v0.11.1 or above.\n- Apply database queries to detect and clear circular dependencies manually.\n- Configure reverse proxy or WAF rules to validate and drop self-referential parent updates.\n\n**Remediation Steps:**\n1. Pull the latest Docker image of Open WebUI (v0.11.1 or newer).\n2. Run the recursive CTE SQL script against the backend database to check for existing folder cycles.\n3. Update any corrupt database rows by setting the parent_id to NULL, breaking cycles.\n4. Deploy custom WAF filter rule to detect matching parent_id and path ID variables on update endpoints if quick upgrade is unfeasible.\n\n## References\n\n- [https://github.com/open-webui/open-webui/security/advisories/GHSA-8r35-5x5r-hv74](https://github.com/open-webui/open-webui/security/advisories/GHSA-8r35-5x5r-hv74)\n- [https://github.com/open-webui/open-webui/pull/28748](https://github.com/open-webui/open-webui/pull/28748)\n- [https://github.com/open-webui/open-webui/commit/23b3a69bc26839bfa74edd1be6bfa2568ae902f4](https://github.com/open-webui/open-webui/commit/23b3a69bc26839bfa74edd1be6bfa2568ae902f4)\n- [https://github.com/open-webui/open-webui/releases/tag/v0.11.1](https://github.com/open-webui/open-webui/releases/tag/v0.11.1)\n- [https://nvd.nist.gov/vuln/detail/CVE-2026-87013](https://nvd.nist.gov/vuln/detail/CVE-2026-87013)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-87013) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-11T15:31:47.706764Z"}, {"uuid": "1eea37c3-8278-4cfe-9fd4-402796e3073d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87014", "type": "seen", "source": "https://gist.github.com/alon710/57a0435a9d7a14ff9a1f3ca71156beef", "content": "# CVE-2026-87014: CVE-2026-87014: Session Desynchronization and Privilege Persistence in Open WebUI\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-09-10\n> **Full Report:** https://cvereports.com/reports/CVE-2026-87014\n\n## Summary\nOpen WebUI from version 0.9.0 to 0.11.1 is vulnerable to a state desynchronization and privilege persistence flaw. When an administrator is demoted to a standard user via Single Sign-On (SSO) role synchronization, the local database is updated, but their active Socket.IO connection is not invalidated. Because the WebSocket handlers authorize operations using the cached role in the socket context, the demoted user retains administrative read and write access to all collaborative notes.\n\n## TL;DR\nA session desynchronization flaw in Open WebUI lets demoted administrators retain administrative read/write access to all users' collaborative notes via active, uninvalidated Socket.IO connections.\n\n## Technical Details\n\n- **CWE ID**: CWE-613 / CWE-863\n- **Attack Vector**: Network\n- **CVSS Score**: 6.5 (Medium)\n- **EPSS Score**: 0.00278 (0.28%)\n- **Impact**: High (Confidentiality & Integrity)\n- **Exploit Status**: No public PoC\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- Open WebUI\n- **Open WebUI**: >= 0.9.0, < 0.11.1 (Fixed in: `0.11.1`)\n\n## Mitigation\n\n- Upgrade to Open WebUI version 0.11.1 or later to leverage the new event-driven session invalidation mechanism.\n- Perform a complete application service or container restart following administrative or automated SSO role demotions to clear stateful connections.\n- Monitor active Socket.IO connection actions for mismatches between database roles and cached connection-time roles.\n\n**Remediation Steps:**\n1. Verify the currently deployed version of Open WebUI by checking the administration panel settings or running 'pip show open-webui'.\n2. If the version is between 0.9.0 and 0.11.0 (inclusive), schedule a maintenance window.\n3. Execute 'pip install --upgrade open-webui' or update your container deployment configuration to pull tag 'v0.11.1' or later.\n4. Restart the application service to clear memory-cached socket contexts.\n\n## References\n\n- [GitHub Security Advisory GHSA-wjwr-xfp9-r66p](https://github.com/open-webui/open-webui/security/advisories/GHSA-wjwr-xfp9-r66p)\n- [Fix Commit](https://github.com/open-webui/open-webui/commit/ce3c175e260709f359d7e6cbb3132f0572098b95)\n- [Open WebUI v0.11.1 Release](https://github.com/open-webui/open-webui/releases/tag/v0.11.1)\n- [NVD - CVE-2026-87014](https://nvd.nist.gov/vuln/detail/CVE-2026-87014)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-87014) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-11T16:33:17.602901Z"}, {"uuid": "b2f7bbf8-bb4a-47d6-ab32-c4b49ccaa91b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87016", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvnhscstap2p", "content": "\ud83d\udccc CVE-2026-87016 - Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.41 until 0.11.1, get_user_by_oauth_sub and get_user_by_... https://www.cyberhub.blog/cves/CVE-2026-87016", "creation_timestamp": "2026-09-16T15:37:07.621710Z"}]}