CVE-2026-70482 | Open WebUI up to 0.10.x OAuth Client improper authorization

August 4, 2026 Yanac

A vulnerability classified as critical was found in Open WebUI up to 0.10.x. This vulnerability affects unknown code of the component OAuth Client. The manipulation results in improper authorization.

This vulnerability was named CVE-2026-70482. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More