CVE-2026-0766 | Open WebUI load_tool_module_by_id command injection

January 9, 2026 Yanac

A vulnerability identified as critical has been detected in Open WebUI. The affected element is the function load_tool_module_by_id. Performing a manipulation results in command injection.

This vulnerability is known as CVE-2026-0766. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More