CVE-2026-88006: Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.1, Open WebUI's OAuth token exchange endpoint issues a session for a provider access token without running the OAuth role management that the normal OAuth login callback runs. A user whose provider roles the login callback would refuse, or would demote, could still obtain a working session at their existing role through this endpoint. This issue is fixed in version 0.11.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 0.11.1
Event History
Frequently Asked Questions
Which deployments are exposed?
Open WebUI versions from 0.8.0 through 0.11.0 are affected. The issue applies where OAuth is used and provider-role policy is expected to deny access or reduce a user's role.
What does an attacker need to exploit this issue?
An attacker needs a provider access token for a user whose provider roles would be refused or demoted by the normal OAuth login callback. They can use the OAuth token exchange endpoint to obtain a session without that role-management check.
What is the impact of successful exploitation?
The affected user can receive a working Open WebUI session at their existing role rather than being denied or demoted according to the OAuth role policy. The reported impact includes low confidentiality and integrity impact, with no availability impact.
What should administrators do?
Upgrade Open WebUI to version 0.11.1, which fixes the issue. If upgrading is not immediately possible, the provided information does not specify a workaround.