Open WebUI below 0.11.1: XSS account takeover, SSRF, OAuth bypasses

published 2026-09-10

An attacker can run JavaScript in your Open WebUI browser session and take over your account, including an admin's. Separate flaws let the Playwright web loader be tricked (DNS rebinding) into reaching internal services, and OAuth sign-in can be bypassed.

Fixed in: 0.11.1

CVE: CVE-2026-70486, CVE-2026-87016, CVE-2026-87995, CVE-2026-87996

Source: GitHub Advisory

Am I affected?

You are affected if the installed version is older than 0.11.1. Check the version you have and update to 0.11.1 or later. The fixed version is verified against a vendor or advisory source.

Get the fix

FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 1803 and your operating system.