Broken Access Control in Open WebUI
Blog
October 27, 2026|5 minutes
CybersecurityTelecom, Media and Technology
An incomplete authorization check in Open WebUI allowed low privileged attackers to access sensitive tool data.
CVE-2026-34222
An incomplete authorization check in Open WebUI allowed low privileged attackers to access sensitive tool data.
CVE-2026-34222