Vulnerability Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, get_event_call delivered execute:python and execute:tool Socket.IO events to a client-supplied session_id after checking only that the session was connected, allowing authenticated users who learned another socket ID through ydoc:document:join to run code interpreter Python or tools in that user session. This issue is fixed in version 0.10.0.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openwebui | Open Webui | < 0.10.0 |
Related Weaknesses (CWE)
References
- https://github.com/open-webui/open-webui/commit/386ac958144dbbbf0aa6e268070d72b6Patch
- https://github.com/open-webui/open-webui/pull/25763Issue TrackingPatch
- https://github.com/open-webui/open-webui/releases/tag/v0.10.0ProductRelease Notes
- https://github.com/open-webui/open-webui/security/advisories/GHSA-74h3-cxq7-vc5qMitigationVendor Advisory
- https://github.com/open-webui/open-webui/security/advisories/GHSA-74h3-cxq7-vc5qMitigationVendor Advisory
FAQ
What is CVE-2026-59216?
CVE-2026-59216 is a vulnerability with a CVSS score of 7.7 (HIGH). Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, get_event_call delivered execute:python and execute:tool Socket.IO events to a client-supplied se...
How severe is CVE-2026-59216?
CVE-2026-59216 has been rated HIGH with a CVSS base score of 7.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-59216?
Check the references section above for vendor advisories and patch information. Affected products include: Openwebui Open Webui.