CVE-2026-45672 HIGH

CVE-2026-45672: Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed

Vendor Open-Webui
Product open-webui
Weakness CWE-863 · Incorrect authorization
Published May 15, 2026
Last update May 19, 2026
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.12, the /api/v1/utils/code/execute endpoint executes arbitrary Python code via Jupyter for any verified user, even when the admin has set ENABLE_CODE_EXECUTION=false. The feature gate is not enforced on the API endpoint — the configuration says "disabled" but code still executes. This vulnerability is fixed in 0.8.12.

Key dates

02Disclosure timeline

May 15, 2026 CVE published
May 19, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2022-3024 Simple Bitcoin Faucets <= 1.7.0 - Unauthorised AJAX Call to Stored XSS CVE-2025-46702 Mattermost Playbooks allows privilege escalation through improper access control in playbook run participant management CVE-2026-32914 OpenClaw < 2026.3.12 - Insufficient Access Control in /config and /debug Endpoints CVE-2025-24866 Unauthorized Access to User Activity Logs API by delegated granular administration roles CVE-2021-39156 Fragments in Path May Lead to Authorization Policy Bypass