Broken Access Control in Open WebUI

An incomplete authorization check in Open WebUI allowed low privileged attackers to access sensitive tool data.

CVE-2026-34222

 

Read the full advisory here (s'ouvre dans un nouvel onglet)