Broken Access Control in Open WebUI
Blog
27. Oktober 2026|5 minutes
CybersecurityTelecom, Media and Technology
An incomplete authorization check in Open WebUI allowed low privileged attackers to access sensitive tool data.
CVE-2026-34222
Read the full advisory here (öffnet sich in einem neuen Tab)