CVE-2026-109293 | Open WebUI up to 0.11.3 Tool Export /api/v1/tools/export information disclosure

October 12, 2026 Yanac

A vulnerability was found in Open WebUI up to 0.11.3. It has been declared as problematic. This issue affects some unknown processing of the file /api/v1/tools/export of the component Tool Export. Such manipulation leads to information disclosure.

This vulnerability is referenced as CVE-2026-109293. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More