p PatchFirst

CVE-2026-87015

CVE-2026-87015 · Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 until 0.11.1, backend/open_webui/utils/tools.py captured a cookie jar from the enclosing connection loop instead of binding it to each external tool callable. When multiple tool servers were attached and a session or system OAuth connection was processed last, a request to a different server configured for bearer authentication could include the calling user's Open WebUI session cookies, allowing that server's operator to reuse the session and take over the account. This issue is fixed in version 0.11.1.

CVSS 6.8 · Media · EPSS 0,5% · Corrección disponible

Publicación
Actualización

Pila tecnológica: python

Productos y versiones afectados

  • open-webui

    Versiones
    • >= 0.6.27, < 0.11.1: Afectada

    Sin corrección publicada

  • open-webui PyPI

    Versiones
    • 0.10.0
    • 0.10.1
    • 0.10.2
    • 0.11.0
    • 0.6.27
    • 0.6.28
    • 0.6.29
    • 0.6.30
    • 0.6.31
    • 0.6.32
    • 0.6.33
    • 0.6.34
    • 0.6.35
    • 0.6.36
    • 0.6.37
    • 0.6.38
    • 0.6.39
    • 0.6.40
    • 0.6.41
    • 0.6.42
    • 0.6.43
    • 0.7.0
    • 0.7.1
    • 0.7.2
    • 0.8.0
    • 0.8.1
    • 0.8.10
    • 0.8.11
    • 0.8.12
    • 0.8.2
    • 0.8.3
    • 0.8.4
    • 0.8.5
    • 0.8.6
    • 0.8.7
    • 0.8.8
    • 0.8.9
    • 0.9.0
    • 0.9.1
    • 0.9.2
    • 0.9.3
    • 0.9.4
    • 0.9.5
    • 0.9.6
    Intervalos de versiones afectados
    • ECOSYSTEM: ≥ 0.6.27, < 0.11.1

    Actualiza a 0.11.1

Fuentes originales

Comprueba tu servidor →