CVE-2026-59226

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 before 0.10.0, execute_automation rehydrated automation owners without rechecking that they were still active or still had features.automations, and check_model_access only enforced private-model grants for the exact user role, allowing deactivated pending users to continue scheduled model execution. This issue is fixed in version 0.10.0.

• CWE-285
• CWE-862
• CWE-863

• https://github.com/open-webui/open-webui/commit/920b655f4689e2118de928fbc936f6ebd4fed396Patch
• https://github.com/open-webui/open-webui/pull/26047Issue Tracking, Patch
• https://github.com/open-webui/open-webui/releases/tag/v0.10.0Product, Release Notes
• https://github.com/open-webui/open-webui/security/advisories/GHSA-mvx4-532p-xfm9Vendor Advisory

Published

Jul 9, 2026

Last Modified

Jul 10, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-59220Open WebUI is an extensible, feature-rich, and user-friendly…6.5
• CVE-2026-59221Open WebUI is an extensible, feature-rich, and user-friendly…7.7
• CVE-2026-59222Open WebUI is an extensible, feature-rich, and user-friendly…6.5
• CVE-2026-59223Open WebUI is an extensible, feature-rich, and user-friendly…4.3
• CVE-2026-59224Open WebUI is an extensible, feature-rich, and user-friendly…8
• CVE-2026-59225Open WebUI is an extensible, feature-rich, and user-friendly…6.3
• CVE-2026-59227Open WebUI is an extensible, feature-rich, and user-friendly…5.4
• CVE-2026-5923Malicious use of a stolen cookie might allow modifications t…6
• CVE-2026-59230Improper input validation vulnerability in Apache Camel. …6.5
• CVE-2026-59231Server-Side Request Forgery in the PDF export component in m…5.3
• CVE-2026-59232Cross-site Scripting in the lead index view in Roskus Prospe…5.3
• CVE-2026-59233Missing Authorization in the permission management component…8.7