CVE-2026-34222 in Open WebUI

Resumen (Inglés)

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.8.11, there is a broken access control vulnerability in tool values. This issue has been patched in version 0.8.11.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsable

GitHub_M

Reservar

2026-03-26

Divulgación

2026-04-01

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
354738	open-webui Open WebUI escalada de privilegios	285	No está definido	Arreglo oficial	CVE-2026-34222

Fuentes

• MITRE
• NVD
• CVE Details