CVE-2026-45672

High

Published: 15/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Open WebUI is a self-hosted artificial intelligence platform that prior to version 0.8.12 allowed any verified user to execute arbitrary Python code, even when the admin set ENABLE_CODE_EXECUTION=false. The API endpoint did not enforce this configuration, leading to unauthorized code execution.

Risk Assessment

The organization may be exposed to malicious code execution by verified users, potentially leading to data loss or system compromise.

Recommendation

It is recommended to upgrade to version 0.8.12 or later to mitigate this vulnerability and ensure all security settings are properly configured.

Original NVD description (English source)

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.12, the /api/v1/utils/code/execute endpoint executes arbitrary Python code via Jupyter for any verified user, even when the admin has set ENABLE_CODE_EXECUTION=false. The feature gate is not enforced on the API endpoint — the configuration says "disabled" but code still executes. This vulnerability is fixed in 0.8.12.