CVE-2026-70482 Details
Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.0, when ENABLE_OAUTH_TOKEN_EXCHANGE=True, /oauth/{provider}/token/exchange accepts a raw provider access token and validates it by calling the provider userinfo endpoint without confirming which OAuth client the token was issued to. Anyone holding an access token minted for any client registered with the same provider could exchange it for an Open WebUI session as that token user, including applications the operator does not control and has never authorized. This issue is fixed in 0.11.0.
A vulnerability in Open WebUI's OAuth token exchange process can lead to account takeover. This issue affects versions 0.8.0 prior to 0.11.0. When the token exchange feature is enabled, the application accepts access tokens from various OAuth providers and validates them by calling the provider's userinfo endpoint. However, this validation does not confirm which client the token was issued to. As a result, an attacker with a valid access token from any client registered with the same provider can exchange it for an Open WebUI session as the token's user. This includes tokens from applications the Open WebUI operator does not control or authorize.
Users should update to Open WebUI version 0.11.0 or later, and set the 'OAUTH_TOKEN_EXCHANGE_TRUSTED_CLIENT_IDS' environment variable to list the clients that are allowed for token exchange. For providers that do not support token introspection, such as Google or Microsoft, the token exchange feature should be disabled.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Aug 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/open-webui/open-webui/security/advisories/GHSA-rq84-p6rr-vf89 | CISA-ADP | ExploitMitigationVendor Advisory |
| https://github.com/open-webui/open-webui/commit/b190dcf3caa00dc8b7b9c7312828298d9143f60d | [email protected] | Patch |
| https://github.com/open-webui/open-webui/commit/c4332be71e6e9c314e8a13b9d2819a6932561630 | [email protected] | Patch |
| https://github.com/open-webui/open-webui/releases/tag/v0.11.0 | [email protected] | Release Notes |
| https://github.com/open-webui/open-webui/security/advisories/GHSA-rq84-p6rr-vf89 | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-287 | Improper Authentication | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| openwebui open webui | >= 0.8.0, < 0.11.0 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 18, 2026 | Initial Analysis | [email protected] |
| Aug 6, 2026 | CVE Modified | CISA-ADP |
| Aug 5, 2026 | CVE Modified | CISA-ADP |
| Aug 4, 2026 | New CVE Received | [email protected] |