Tools AI Risk Radar ai-incident-0221
Incident record
Open WebUI fixes access to disabled model providers
- Severity
- Medium
- Status
- Patched
- Type
- Infra Vuln
- Target
- Open WebUI before 0.11.4
- Actor
- researcher
- CVE
- CVE-2026-109296
What happened
An approved signed-in user can explicitly select a configured provider that has been disabled in the interface. The backend attaches its configured credentials to the outgoing request.
The maintainer’s 27 September advisory identifies 0.11.4 as fixed and rates the issue CVSS 3.1 4.3 Medium. The demonstrated impact is use of the provider through the backend; direct disclosure of the credential to the user is unconfirmed.
Sources
- Original advisory or disclosuregithub.com/open-webui/open-webui/security/advisories/GHSA-hm…
- CVE recordcveawg.mitre.org/api/cve/CVE-2026-109296
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026