Description
Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only. Attackers can request GET /api/v1/tools/export to retrieve the full Python source of read-only shared tools, exposing embedded API keys and credentials.
Published: 2026-10-12
Score: 7.1 High
EPSS: < 1% Very Low
KEV: No
Impact: Information Disclosure
Action: Apply Patch
AI Analysis

Impact

Open WebUI versions between 0.11.0 and before 0.11.4 contain a flaw that allows authenticated users who are not administrators and who have the tool export permission to view the complete source code of tools shared with them as read‑only. The source code can contain hard‑coded API keys and credentials, so fetching it exposes sensitive exploitation material. The weakness is characterized as information disclosure (CWE‑200).

Affected Systems

The affected product is Open WebUI from version 0.11.0 up to, but not including, 0.11.4. Any deployment of those versions that grants tool export rights to non‑admin users is vulnerable.

Risk and Exploitability

The CVSS score of 7.1 indicates a high severity vulnerability. EPSS data is not available, so the likelihood of exploitation is unknown, and the vulnerability is not listed in the CISA KEV catalog. Attackers must first authenticate and be granted tool export permissions; once those preconditions exist, they can issue a GET request to /api/v1/tools/export and retrieve the full Python source of shared tools, potentially leaking embedded credentials.

Generated by OpenCVE AI on October 12, 2026 at 19:40 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest patch or upgrade Open WebUI to version or newer.
  • Revise permissions so that only trusted users have tool export rights; consider revoking the permission for all users unless absolutely necessary.
  • Audit existing shared tools for embedded secrets and remove or rotate any hard‑coded credentials.

Generated by OpenCVE AI on October 12, 2026 at 19:40 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 13 Oct 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 12 Oct 2026 16:30:00 +0000

Type Values Removed Values Added
Description Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only. Attackers can request GET /api/v1/tools/export to retrieve the full Python source of read-only shared tools, exposing embedded API keys and credentials.
Title Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint
First Time appeared Openwebui
Openwebui open Webui
Weaknesses CWE-200
CPEs cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:*
Vendors & Products Openwebui
Openwebui open Webui
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Openwebui Open Webui
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-10-23T21:57:55.938Z

Reserved: 2026-10-12T14:12:52.833Z

Link: CVE-2026-109293

cve-icon Vulnrichment

Updated: 2026-10-13T15:44:39.486Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-12T17:17:22.650

Modified: 2026-10-13T20:39:48.767

Link: CVE-2026-109293

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-12T19:45:06Z

Weaknesses
  • CWE-200

    Exposure of Sensitive Information to an Unauthorized Actor