Broken Access Control in Open WebUI
An incomplete authorization check in Open WebUI allowed low privileged attackers to access sensitive tool data.
CVE-2026-34222
An incomplete authorization check in Open WebUI allowed low privileged attackers to access sensitive tool data.
CVE-2026-34222