A AegiFlow
MEDIUMCVSS 6.8EPSS 0.3%

CVE-2026-87015

CVE-2026-87015 updated by NVD

Published
2026-09-10
Modified
2026-09-17
EPSS percentile
20%
Sources
github-advisory, nvd

Summary

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 until 0.11.1, backend/open_webui/utils/tools.py captured a cookie jar from the enclosing connection loop instead of binding it to each external tool callable. When multiple tool servers were attached and a session or system OAuth connection was processed last, a request to a different server configured for bearer authentication could include the calling user's Open WebUI session cookies, allowing that server's operator to reuse the session and take over the account. This issue is fixed in version 0.11.1.

Affected packages

EcosystemPackageAffected versionsFixed versions
PyPIopen-webui0.11.1

Remediation: Upgrade to 0.11.1 or later.

References

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.