CVE-2026-70491 open-webui CVE debrief

Who should care

Open WebUI administrators, users with access to tool source, and security teams monitoring for credential exposure should be aware of this vulnerability. They should assess their exposure, review the official advisory, and take necessary actions to restrict access to tool source and update to a fixed version. Additionally, they should review tool source for hard-coded credentials and implement compensating controls for exposed systems.

Technical summary

In Open WebUI 0.10.2 and earlier, authenticated non-admin users can obtain full Python tool source via certain API endpoints. The issue is fixed in version 0.11.0. This vulnerability allows non-admin users to access sensitive information, potentially exposing hard-coded credentials and internal service URLs. The affected API endpoints include GET /api/v1/tools/, GET /api/v1/tools/list, and GET /api/v1/tools/id/{id} in backend/open_webui/routers/tools.py.

Defensive priority

Authenticated non-admin users may obtain server-side tool source, potentially exposing hard-coded credentials.

Recommended defensive actions

• Inventory Open WebUI installations and verify user access controls.
• Restrict access to tool source for non-admin users.
• Monitor for suspicious access to tool source.
• Update to version 0.11.0 or later.
• Review tool source for hard-coded credentials.
• Perform a thorough review of the current tool source for any potential hard-coded credentials or sensitive information.
• Implement additional monitoring and logging to detect potential exploitation attempts.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability. Evidence is limited to official records. The vulnerability affects Open WebUI versions 0.10.2 and earlier, allowing authenticated non-admin users to obtain full Python tool source via certain API endpoints. Defenders should verify the affected scope, review official advisories, and assess their exposure. They should also monitor for suspicious access to tool source and review tool source for hard-coded credentials.

Official resources