CVE-2026-70482
Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client
CVSS Score
8.1
EPSS Score
0.0%
EPSS Percentile
0th
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.0, when ENABLE_OAUTH_TOKEN_EXCHANGE=True, /oauth/{provider}/token/exchange accepts a raw provider access token and validates it by calling the provider userinfo endpoint without confirming which OAuth client the token was issued to. Anyone holding an access token minted for any client registered with the same provider could exchange it for an Open WebUI session as that token user, including applications the operator does not control and has never authorized. This issue is fixed in 0.11.0.
| CWE | CWE-287 |
| Vendor | open-webui |
| Product | open-webui |
| Published | Aug 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for open-webui open-webui
Be the first to know when new high vulnerabilities affecting open-webui open-webui are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None
Affected Versions
open-webui / open-webui
>= 0.8.0, < 0.11.0
References
github.com: https://github.com/open-webui/open-webui/security/advisories/GHSA-rq84-p6rr-vf89 github.com: https://github.com/open-webui/open-webui/commit/b190dcf3caa00dc8b7b9c7312828298d9143f60d github.com: https://github.com/open-webui/open-webui/commit/c4332be71e6e9c314e8a13b9d2819a6932561630 github.com: https://github.com/open-webui/open-webui/releases/tag/v0.11.0