VYPR
← All advisories
Moderate severityOSV Advisory· Published Jan 23, 2026· Updated Sep 2, 2026

CVE-2026-0767

CVE-2026-0767

Description

Rejected reason: Open WebU's investigation showed that this describes the behavior of plain HTTP rather than a defect in the product. TLS termination is the operator's deployment decision, as it is for any backend that speaks HTTP, and not a security issue. https://docs.openwebui.com/security/vendor-dispositions/cve-2026-0767

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
open-webuiPyPI
<= 0.6.33—

Affected products

2
  • Openwebui/Open Webui2 versions
    cpe:2.3:a:openwebui:open_webui:0.6.32:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:openwebui:open_webui:0.6.32:*:*:*:*:*:*:*
    • (no CPE)range: v0.1.102, v0.1.103, v0.1.104, …

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.