CVE-2026-0767
BaseFortify
Publication date: 2026-01-23
Last updated on: 2026-01-30
Assigner: Zero Day Initiative
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| openwebui | open_webui | 0.6.32 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-319 | The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in Open WebUI involves the cleartext transmission of credentials to an endpoint, allowing network-adjacent attackers to intercept and disclose sensitive credential information without needing authentication. The flaw arises because sensitive information is sent in plaintext, making it accessible to attackers on the same network. [1]
How can this vulnerability impact me? :
An attacker on the same network can exploit this vulnerability to obtain sensitive credentials transmitted in plaintext. This disclosure can lead to further compromise of the affected system or network, as the attacker may use the stolen credentials to gain unauthorized access. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring network traffic for cleartext transmission of credentials to the Open WebUI endpoint. Network-adjacent attackers can intercept these transmissions. Using packet capture tools like tcpdump or Wireshark, you can filter for traffic to the Open WebUI service and inspect for plaintext credentials. For example, a command like 'tcpdump -i <interface> -A port <open_webui_port>' can be used to capture and display ASCII data on the relevant port to identify cleartext credentials. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include restricting network access to the Open WebUI service to trusted hosts only, using network segmentation to limit exposure, and monitoring network traffic for suspicious activity. Since the vulnerability involves cleartext transmission of credentials, avoid using the affected Open WebUI version until a patch or update is available. Employing encrypted tunnels (e.g., VPN or SSH) to protect credentials in transit can also help reduce risk. [1]