CVE-2026-109283 | Open WebUI up to 0.11.3 OAuth Token Exchange Endpoint authorization

October 12, 2026 Yanac

A vulnerability has been found in Open WebUI up to 0.11.3 and classified as critical. This impacts an unknown function of the component OAuth Token Exchange Endpoint. Performing a manipulation results in authorization bypass.

This vulnerability was named CVE-2026-109283. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More