CVE-2026-70482 Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client
Attackers can hijack user accounts by exchanging OAuth tokens issued to any client when token exchange is enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-70482?
CVE-2026-70482 is a high-severity authentication bypass vulnerability in Openwebui Open Webui, published on 4 Aug 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.0, when ENABLE_OAUTH_TOKEN_EXCHANGE=True, /oauth/{provider}/token/exchange accepts a raw provider access token and validates it by calling the provider userinfo endpoint without confirming which OAuth client the token was issued to. Anyone holding an access token minted for any client registered with the same provider could exchange it for an Open WebUI session as that token user, including applications the operator does not control and has never authorized. This issue is fixed in 0.11.0.
Weakness: CWE-287
Which versions are affected by CVE-2026-70482?
3 open source packages ship an affected version, including open-webui. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
open-webui PyPI | From 0.8.0 | 0.11.0 |
open-webui PyPI | From 0.8.0 | 0.11.0 |
open-webui PyPI | From 0.8.0 | 0.11.0 |
Products include Openwebui Open Webui.
How do I fix CVE-2026-70482?
Upgrade open-webui to 0.11.0 or later.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-70482 being exploited?
There is no known exploitation of CVE-2026-70482 in the wild and no public exploit code.
Other vulnerabilities in Openwebui Open Webui
- CVE-2026-44551 Open WebUI: LDAP Empty Password Authentication Bypass
- CVE-2026-56400 open-webui - Remote Code Execution via CORS Misconfiguration and Session Validation
- CVE-2024-8017 Cross-site Scripting (XSS) in open-webui/open-webui
- CVE-2026-45672 Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed
- CVE-2026-87995 Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin
Sources
Also known as GHSA-rq84-p6rr-vf89, PYSEC-2026-3652.