CVE-2026-88006: Open WebUI OAuth Token Exchange Bypass Vulnerability
Summary
CVE-2026-88006: Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange. Affects open-webui versions >= 0.8.0, < 0.11.1. Fixed in 0.11.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Open WebUI is an open-source web application framework that facilitates user interface development for web applications. It supports OAuth for authentication, allowing users to sign in using third-party identity providers. The framework includes role management features that help administrators control user access based on their roles. However, a vulnerability exists in the OAuth token exchange mechanism that can allow unauthorized access under certain conditions.
Vulnerability Detail
The vulnerability arises from the OAuth token exchange endpoint in Open WebUI, which issues a session for a provider access token without enforcing the OAuth role management policies that are applied during the normal OAuth login callback. This means that users who should be denied access based on their roles can still sign in and maintain their existing session, potentially retaining admin privileges even after their roles have been revoked by the identity provider. The issue is rooted in the implementation of the token exchange endpoint, which lacks the necessary role evaluation checks, leading to unauthorized access.
How To Fix
Latest published version: 0.12.3 as of 22 Oct 2026
pip install --upgrade "open-webui==0.12.3"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.11.1
This is the first release that contains the fix.
pip install --upgrade "open-webui==0.11.1"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can disable the OAuth token exchange feature by setting 'ENABLE_OAUTH_TOKEN_EXCHANGE=False' in your configuration. This will prevent users from signing in via token exchange until the package is updated.
Conclusion
The CVE-2026-88006 vulnerability in Open WebUI's OAuth token exchange endpoint poses a significant risk by allowing users to bypass role management policies. Upgrading to version 0.11.1 or later is essential to mitigate this issue and ensure proper role evaluation during the token exchange process.
See every vulnerability recorded for open-webui →
FAQ
The CVSS score of this vulnerability is 6.5, indicating a moderate level of severity.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The vulnerability can be exploited if 'ENABLE_OAUTH_TOKEN_EXCHANGE' is set to True, 'ENABLE_OAUTH_ROLE_MANAGEMENT' is enabled, and a valid access token is available for a linked account.
If the vulnerability is not fixed, users may retain unauthorized access to their accounts, including admin privileges, even after their roles have been revoked by the identity provider.
No, the token exchange endpoint does not create new accounts; it only allows existing accounts to retain their roles, which can lead to unauthorized access.
References
Related vulnerabilities
Recent vulnerabilities recorded for open-webui.
