CVE-2026-87011 | open-webui Open WebUI up to 0.11.0 OAuth Logout oauth.py resource consumption

September 9, 2026 Yanac

A vulnerability was found in open-webui Open WebUI up to 0.11.0. It has been classified as problematic. This issue affects some unknown processing of the file backend/open_webui/utils/oauth.py of the component OAuth Logout Handler. Performing a manipulation results in resource consumption.

This vulnerability is cataloged as CVE-2026-87011. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More