Broken Access Control in Open WebUI

CybersecurityTelecom, Media and Technology
ExpertoAtos
Atos

Worldwide digital leader

Broken Access Control in Open WebUI

An incomplete authorization check in Open WebUI allowed low privileged attackers to access sensitive tool data.

CVE-2026-34222

 

Read the full advisory here (se abre en una nueva pestaña)