CVE-2026-109294 | Open WebUI up to 0.11.3 Image get_image_base64_from_url image resource consumption

October 12, 2026 Yanac

A vulnerability was found in Open WebUI up to 0.11.3. It has been rated as problematic. Impacted is the function get_image_base64_from_url of the component Image. Performing a manipulation of the argument image results in resource consumption.

This vulnerability is identified as CVE-2026-109294. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More