RepoJournal
Open WebUI @open-webui
73 wires and counting

$ follow Open WebUI

Keep up with Open WebUI in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-05-14
stories 62
GitHub RSS Archive Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

Open WebUI patches folder_id authorization and tool_servers bypass

By RepoJournal · Filed · About Open WebUI

Classic298 yeager PythonToGo rgaricano
4 people shipped this
Classic298 @Classic298 2 cited yeager @yeager 1 cited PythonToGo @PythonToGo rgaricano @rgaricano

Two security fixes close validation gaps on chat creation and tool server enforcement in Open WebUI.

Open WebUI shipped two security fixes from contributor Classic298 [1] [2]. POST /api/v1/chats/new and POST /api/v1/chats/{id}/folder now validate folder_id against ownership, existence, and UUID format. Previously, a caller-supplied folder_id was persisted verbatim, allowing chat rows to reference another user's folder or a non-existent UUID. No cross-user read path exposed these rows, limiting immediate exploitation, but the data integrity risk is closed.

Separately, the features.direct_tool_servers permission is now enforced on the inference path (/api/chat/completions). The fix ensures the per-user flag, previously stripped only from stored settings in routers/users.py, also applies when tool_servers come straight from the request body into metadata.

Three translation updates landed for Swedish (sv-SE), German (de-DE), and Spanish (es-ES), bringing new UI strings into sync with v0.9.5.

$ ls open-webui/reviews/ # the step-back reads

the week in review Open WebUI 0.11.2 ships as nine security advisories land the month in review Open WebUI 0.11.1 adds tool approval, 0.11.2 fixes
Topics: Local LLMs AI / ML Full archive →

Quick answers

What shipped in Open WebUI on May 14, 2026?
Two security fixes close validation gaps on chat creation and tool server enforcement in Open WebUI. In total, 55 commits and 7 pull requests landed.
Who contributed to Open WebUI on May 14, 2026?
4 developers shipped this update, including Classic298, yeager, PythonToGo, and rgaricano.
What were the notable Open WebUI updates?
fix: validate folder_id ownership on chat create + folder-update endpoints (#24588), fix: enforce features.direct_tool_servers on chat-completion tool_servers (#24693), and i18n: Update Swedish (sv-SE) translation.
♥

$ log @open-webui --recent

Open WebUI ships five security fixes for auth and request handling 8 shipped Four breaking security advisories expose data and enable account takeover in Open WebUI 17 shipped Open WebUI 0.11.2 ships with tool parsing fix 90 shipped Fixes Redis Cluster stop, German catalog drift 8 shipped

$ log --all # elsewhere on the wire

@golang Fast-path receive buffer cleared on stream reset Meta React Native adds Stable API guards to renderer attributed string

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.