PyPI/open-webui CVE-2026-34222: high 7.7, EPSS 5.01%

Open WebUI has Broken Access Control in Tool Valves

Action: Upgrade open-webui to 0.8.11 or later.

pip install open-webui==0.8.11

Affected

Fixed versions

Sources

• osv: GHSA-7429-hxcv-268m
• https://github.com/open-webui/open-webui/security/advisories/GHSA-7429-hxcv-268m
• https://nvd.nist.gov/vuln/detail/CVE-2026-34222
• https://github.com/open-webui/open-webui
• https://github.com/open-webui/open-webui/releases/tag/v0.8.11
• http://seclists.org/fulldisclosure/2026/Apr/4

CVE-2026-34222 · published 2026-04-01T20:25:49Z · modified 2026-07-13T16:42:44.225630554Z · JSON