CVE-2026-109293 open-webui CVE debrief

Who should care

Defenders and administrators of Open WebUI systems, especially those with users having tool export permissions, should assess exposure and take necessary actions. They should prioritize verifying and restricting access to the tool export endpoint, reviewing and securing exposed API keys and credentials, and updating Open WebUI to version 0.11.4 or later. This includes reviewing compensating controls for exposed systems, checking relevant monitoring, and

Why it matters

CVE-2026-109293 is a high-severity information disclosure vulnerability in Open WebUI versions 0.11.0 before 0.11.4. Authenticated non-admin users with tool export permission can obtain tool source code shared with them read-only, exposing embedded API keys and credentials. Defenders should prioritize verifying and restricting access to the tool export endpoint, reviewing and securing exposed API keys and credentials, and updating Open WebUI to version 0.11.4 or later.

• Potential exposure of sensitive API keys and credentials
• Possible unauthorized access to tool source code
• Need for verifying and restricting access to the tool export endpoint
• Requirement for reviewing and securing exposed API keys and credentials

Technical summary

The vulnerability allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only. This can expose embedded API keys and credentials. The vulnerability is a high-severity information disclosure issue in Open WebUI versions 0.11.0 before 0.11.4. Defenders should prioritize verifying and restricting access to the tool export endpoint, reviewing and securing exposed API keys and credentials, and updating Open WebUI to version 0.11.4 or later. The vulnerability has a CVSS score of 7.1 and a CVSS severity of HIGH.

Defensive priority

Defenders should prioritize verifying and restricting access to the tool export endpoint, especially for users with export permissions. They should also review and secure exposed API keys and credentials.

Recommended defensive actions

• Verify and restrict access to the tool export endpoint
• Review and secure exposed API keys and credentials
• Update Open WebUI to version 0.11.4 or later
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and source item provide details about the vulnerability. However, additional information about potential exploitation or affected systems is limited. Defenders should verify and restrict access to the tool export endpoint, review and secure exposed API keys and credentials, and update Open WebUI to version 0.11.4 or later. The source item and CVE record provide source-provided CVE metadata and official vulnerability details.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.