Missing Authorization in Open WebUI - CVE-2026-59216
Published: July 3, 2026
Vulnerability details
The vulnerability allows a remote user to execute arbitrary code in another user's authenticated browser session and, if the victim is an administrator, execute arbitrary code on the server.
The vulnerability exists due to missing authorization in the Socket.IO event-caller get_event_call() when processing a client-supplied session_id. A remote user can send a specially crafted chat completion request with another user's session identifier to execute arbitrary code in another user's authenticated browser session and, if the victim is an administrator, execute arbitrary code on the server.
Exploitation requires user interaction and access to a shared note that exposes the victim's live socket identifier to a read-access participant.