CVE-2026-109292 | open-webui Open WebUI up to 0.11.1 OAuth information disclosure

October 12, 2026 Yanac

A vulnerability was found in open-webui Open WebUI. It has been classified as problematic. This vulnerability affects unknown code of the component OAuth. This manipulation causes information disclosure.

The identification of this vulnerability is CVE-2026-109292. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More