Vulnerability Details CVE-2026-59226
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 before 0.10.0, execute_automation rehydrated automation owners without rechecking that they were still active or still had features.automations, and check_model_access only enforced private-model grants for the exact user role, allowing deactivated pending users to continue scheduled model execution. This issue is fixed in version 0.10.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 22.2%
CVSS Severity
CVSS v3 Score 3.1
References
Products affected by CVE-2026-59226
-
cpe:2.3:a:openwebui:open_webui:0.9.0
-
cpe:2.3:a:openwebui:open_webui:0.9.1
-
cpe:2.3:a:openwebui:open_webui:0.9.2
-
cpe:2.3:a:openwebui:open_webui:0.9.3
-
cpe:2.3:a:openwebui:open_webui:0.9.4
-
cpe:2.3:a:openwebui:open_webui:0.9.5
-
cpe:2.3:a:openwebui:open_webui:0.9.6