CVE-2026-88001 | open-webui Open WebUI up to 0.11.0 Web Fetch redirect

September 9, 2026 Yanac

A vulnerability identified as problematic has been detected in open-webui Open WebUI up to 0.11.0. Affected by this vulnerability is an unknown functionality of the component Web Fetch. Performing a manipulation results in open redirect.

This vulnerability is reported as CVE-2026-88001. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More