CVE-2026-56400

Analyzed Analyzed - Analysis Complete

Cross-Origin Request Forgery in Open WebUI

Publication date: 2026-07-15

Last updated on: 2026-07-16

Assigner: VulnCheck

Description

open-webui before 0.3.14 contains a cross-origin resource sharing misconfiguration allowing arbitrary origins with allow_origins=* and authenticated requests to the /api/v1/functions endpoint. Attackers can execute arbitrary code on the openwebui instance by crafting malicious cross-site requests from attacker-controlled websites when an admin user visits them.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-15

Last Modified

2026-07-16

Generated

2026-08-04

AI Q&A

2026-07-15

EPSS Evaluated

2026-08-03

NVD

CVE-2026-56400

EUVD

EUVD-2026-44629

Affected Vendors & Products

Vendor	Product	Version / Range
openwebui	open_webui	to 0.3.14 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-613	According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

Attack-Flow Graph

Executive Summary

CVE-2026-56400 is a critical vulnerability in open-webui versions before 0.3.14. It involves two flaws: a CORS misconfiguration allowing arbitrary origins and a session management issue where cookies aren't invalidated on logout. Attackers can exploit this by tricking an admin into visiting a malicious site, which sends crafted requests to execute arbitrary code on the open-webui instance with root privileges in Docker's default setup.

Detection Guidance

Check open-webui version with: docker exec <container_name> cat /app/open-webui/version.txt. If version is below 0.3.14, the system is vulnerable. Inspect CORS settings in the application configuration files for overly permissive allow_origins=*. Monitor network traffic for unauthorized requests to /api/v1/functions endpoint from external origins.

Impact Analysis

This vulnerability allows attackers to execute arbitrary code on your open-webui instance with root privileges. If you're running open-webui in Docker, this could lead to full container compromise. Attackers can trick an admin user into visiting a malicious website, which then sends requests to execute code on your system.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating GDPR's data protection requirements and HIPAA's security rules. Compromised systems may expose sensitive data, leading to legal penalties, reputational damage, and loss of compliance certifications.

Mitigation Strategies

Upgrade open-webui to version 0.3.14 or later immediately. Remove the overly broad CORS configuration by replacing allow_origins=* with specific allowed origins. Ensure session cookies are invalidated upon logout by checking authentication middleware settings. Restart the application after changes to apply fixes.

Hi! I’m here to help you understand CVE-2026-56400. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70