CVE-2026-45672HIGH 8.8EPSS p32.2%

CVE-2026-45672CVE-2026-45672

Description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.12, the /api/v1/utils/code/execute endpoint executes arbitrary Python code via Jupyter for any verified user, even when the admin has set ENABLE_CODE_EXECUTION=false. The feature gate is not enforced on the API endpoint — the configuration says "disabled" but code still executes. This vulnerability is fixed in 0.8.12.

Scoring

CVSS 3.18.8 (HIGH)
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS0.41% probability of exploitation · percentile 32.2% · 2026-06-19T12:03:05Z
Published2026-05-15
Last modified2026-05-19

Underlying weaknesses· 1

CWE-863

References

  1. https://github.com/open-webui/open-webui/security/advisories/GHSA-482j-2pq6-q5w4
  2. https://github.com/open-webui/open-webui/security/advisories/GHSA-482j-2pq6-q5w4

1

TypeTargetConfidenceTier
WeaknessIncorrect Authorizationcwe-8630%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-45402
CVE
CVE-2026-45671
CVE
CVE-2026-45301
CVE
CVE-2025-64496
CVE
CVE-2026-44554
CVE
CVE-2026-22812
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.