CVE-2026-34222

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.8.11, there is a broken access control vulnerability in tool values. This issue has been patched in version 0.8.11.

• CWE-285

• https://github.com/open-webui/open-webui/releases/tag/v0.8.11Release Notes
• https://github.com/open-webui/open-webui/security/advisories/GHSA-7429-hxcv-268mVendor Advisory
• http://seclists.org/fulldisclosure/2026/Apr/4Exploit, Mailing List, Third Party Advisory

Published

Apr 1, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-34217SandboxJS is a JavaScript sandboxing library. Prior to 0.8.3…7.2
• CVE-2026-34218ClearanceKit intercepts file-system access events on macOS a…6.3
• CVE-2026-34219libp2p-rust is the official rust language Implementation of …5.9
• CVE-2026-3422U-Office Force developed by e-Excellence has a Insecure Dese…9.8
• CVE-2026-34220MikroORM is a TypeScript ORM for Node.js based on Data Mappe…9.8
• CVE-2026-34221MikroORM is a TypeScript ORM for Node.js based on Data Mappe…9.1
• CVE-2026-34224Parse Server is an open source backend that can be deployed …4.4
• CVE-2026-34225Open WebUI is a self-hosted artificial intelligence platform…4.3
• CVE-2026-34226Happy DOM is a JavaScript implementation of a web browser wi…7.5
• CVE-2026-34227Sliver is a command and control framework that uses a custom…8.8
• CVE-2026-34228Emlog is an open source website building system. Prior to ve…6.5
• CVE-2026-34229Emlog is an open source website building system. Prior to ve…6.1