CVE-2026-4994 Details
Description
A vulnerability was found in wandb OpenUI up to 1.0/3.5-turb. Affected is the function generic_exception_handler of the file backend/openui/server.py of the component APIStatusError Handler. The manipulation of the argument key results in information exposure through error message. Access to the local network is required for this attack. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability in Weights and Biases OpenUI versions through 1.0/3.5-turb allows for information exposure via the APIStatusError handler. The issue arises in the generic_exception_handler function within backend/openui/server.py, where raw Python exception messages are sent to the client in JSON format. This vulnerability requires access to the local network and can be exploited by authenticated users, as session cookies are automatically issued in the default Docker deployment.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Mar 28, 2026CISA-ADP
Assessed Mar 30, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://gist.github.com/YLChen-007/8c6ff147186855e4b716e7526de213e1 | [email protected] | ExploitTechnical Description |
| https://vuldb.com/?ctiid.353881 | [email protected] | AdvisoryContent Wall |
| https://vuldb.com/?id.353881 | [email protected] | AdvisoryExploitPartial Content |
| https://vuldb.com/?submit.778266 | [email protected] | ExploitTechnical Description |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor | [email protected] |
| CWE-209 | Generation of Error Message Containing Sensitive Information | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| wandb OpenUI | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 29, 2026 | Data Remediation | [email protected] |
| Mar 28, 2026 | New CVE Received | [email protected] |