CVE-2026-34222 in Open WebUI
Résumé (Anglaise)
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.8.11, there is a broken access control vulnerability in tool values. This issue has been patched in version 0.8.11.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Responsable
GitHub_M
Réserver
26/03/2026
Divulgation
01/04/2026
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 354738 | open-webui Open WebUI élévation de privilèges | 285 | Non défini | Correctif officiel | CVE-2026-34222 |