Low severityNVD Advisory· Published Jul 9, 2026· Updated Jul 9, 2026
Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation
CVE-2026-59226
Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 before 0.10.0, execute_automation rehydrated automation owners without rechecking that they were still active or still had features.automations, and check_model_access only enforced private-model grants for the exact user role, allowing deactivated pending users to continue scheduled model execution. This issue is fixed in version 0.10.0.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
open-webuiPyPI | >= 0.9.0, < 0.10.0 | 0.10.0 |
Affected products
1- Range: 0.9.0 <= v < 0.10.0
Patches
Vulnerability mechanics
References
6- github.com/advisories/GHSA-mvx4-532p-xfm9ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-59226ghsaADVISORY
- github.com/open-webui/open-webui/commit/920b655f4689e2118de928fbc936f6ebd4fed396ghsax_refsource_MISCWEB
- github.com/open-webui/open-webui/pull/26047ghsax_refsource_MISCWEB
- github.com/open-webui/open-webui/releases/tag/v0.10.0ghsax_refsource_MISCWEB
- github.com/open-webui/open-webui/security/advisories/GHSA-mvx4-532p-xfm9ghsax_refsource_CONFIRMWEB
News mentions
0No linked articles in our index yet.