CVE-2026-45672: Open WebUI Code Execution Bypass Vulnerability
Summary
CVE-2026-45672: The /api/v1/utils/code/execute endpoint executes arbitrary Python code via Jupyter for any verified user, even when the admin has set ENABLE_CODE_EXECUTION=false. Affects open-webui versions < 0.8.12. Fixed in 0.8.12. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Open WebUI is an open-source web application that provides a user-friendly interface for managing Jupyter notebooks and executing Python code. It allows users to interact with Jupyter servers, facilitating data analysis and visualization. However, a critical vulnerability has been identified that undermines the security of the application, allowing unauthorized code execution despite administrative settings designed to prevent it.
Vulnerability Detail
The vulnerability arises from the '/api/v1/utils/code/execute' endpoint, which executes arbitrary Python code via Jupyter for any authenticated user, regardless of the 'ENABLE_CODE_EXECUTION' setting. This feature gate is not enforced, leading to a situation where users can execute code even when it is explicitly disabled by the admin. The implications are severe, as it allows for arbitrary code execution, potential data exfiltration, and a false sense of security for users who believe code execution is disabled.
How To Fix
Latest published version: 0.12.3 as of 22 Oct 2026
pip install --upgrade "open-webui==0.12.3"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.8.12
This is the first release that contains the fix.
pip install --upgrade "open-webui==0.8.12"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no effective workarounds other than upgrading to the patched version. However, administrators can temporarily restrict access to the Jupyter server to mitigate risks until the update is applied.
Conclusion
The CVE-2026-45672 vulnerability in Open WebUI poses significant security risks by allowing unauthorized code execution. It is crucial for users to update to version 0.8.12 or later to mitigate these risks and ensure their applications remain secure.
See every vulnerability recorded for open-webui →
FAQ
CVE-2026-45672 is a vulnerability in Open WebUI that allows authenticated users to execute arbitrary Python code even when code execution is disabled by the admin.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The risks include arbitrary code execution, potential data exfiltration, and a compromised security posture for users who believe code execution is disabled.
You can update Open WebUI by running the command 'pip install --upgrade open-webui' in your terminal to ensure you have version 0.8.12 or later.
The CVSS score of this vulnerability is 8.8, indicating a high severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for open-webui.
