AI agent vulnerability · Open WebUI

CVE-2026-0767: Withdrawn Advisory: Open WebUI/ZDI-CAN-28259

mediumCVSS 3.0 5.3GHSA-vh96-p962-544h

This advisory was withdrawn on Sep 2, 2026. The publisher no longer considers it a valid vulnerability.

Withdrawn Advisory This advisory has been withdrawn because it does not describe a valid vulnerability. This link is maintained to preserve external references. Original Description Open WebUI Cleartext Transmission of Credentials Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Open WebUI.

Published Jan 23, 2026 · Updated Sep 2, 2026

Affected packages

open-webui

Ecosystem: PyPI
Affected: <= 0.6.33
Fixed in: No patched version yet
Check: pip show open-webui

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Withdrawn Advisory

This advisory has been withdrawn because it does not describe a valid vulnerability. This link is maintained to preserve external references.

Original Description

Open WebUI Cleartext Transmission of Credentials Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Open WebUI. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the handling of credentials provided to the endpoint. The issue results from transmitting sensitive information in plaintext. An attacker can leverage this vulnerability to disclose transmitted credentials, leading to further compromise. Was ZDI-CAN-28259.

Credited to Classic298.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Open WebUI vulnerabilities

All Open WebUI entries