CVE-2026-44551 Open WebUI: LDAP Empty Password Authentication Bypass
Attackers can bypass LDAP authentication by submitting an empty password, gaining unauthorized access to user accounts in Open WebUI.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-44551?
CVE-2026-44551 is a critical authentication bypass vulnerability in Openwebui Open Webui, published on 15 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP authentication endpoint does not validate that the submitted password is non-empty before performing a Simple Bind against the LDAP server. The LdapForm Pydantic model accepts password: str with no minimum length constraint, so an empty string passes validation. The subsequent Connection.bind() call succeeds on vulnerable LDAP servers, and the application issues a full session token for the target user. This vulnerability is fixed in 0.9.0.
Weakness: CWE-287
Which versions are affected by CVE-2026-44551?
3 open source packages ship an affected version, including open-webui. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
open-webui PyPI | All versions | 0.9.0 |
open-webui PyPI | All versions | 0.9.0 |
open-webui PyPI | All versions | 0.9.0 |
Products include Openwebui Open Webui.
How do I fix CVE-2026-44551?
Upgrade open-webui to 0.9.0 or later.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-44551 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-44551 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Openwebui Open Webui
- CVE-2026-56400 open-webui - Remote Code Execution via CORS Misconfiguration and Session Validation
- CVE-2024-8017 Cross-site Scripting (XSS) in open-webui/open-webui
- CVE-2026-45672 Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed
- CVE-2026-87995 Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin
- CVE-2026-70492 Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages
Sources
Also known as GHSA-2r4p-jpmg-48f4, PYSEC-2026-435.