RepoJournal
Open WebUI @open-webui
73 wires and counting

$ follow Open WebUI

Keep up with Open WebUI in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-06-17
stories 119
GitHub RSS Archive Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

Open WebUI patches three terminal path and file-access security holes

By RepoJournal · Filed · About Open WebUI

Classic298 silentoplayz
2 people shipped this
Classic298 @Classic298 3 cited silentoplayz @silentoplayz 2 cited

Three merged commits close authorization and injection gaps in file access, proxy path decoding, and terminal WebSocket handling.

A file-access authorization fix [1] now confines object-derived write permissions to files the object owner actually owns. Previously, any user with write access to a knowledge base or workspace model could write or delete any file attached to it, even files they could only read.

Two terminal and proxy hardening fixes [2] [3] fail closed when decode caps are exceeded and encode the WebSocket session_id. The decode-until-stable loops now reject paths instead of forwarding still-encoded traversal sequences, and the session_id no longer allows injected query parameters to reach the upstream terminal server.

UI and store fixes [4] [5] improve code execution settings display and deduplicate frontend store fetches.

Action items

References

  1. [1] Confer object-derived file write only for files the object owner owns (#26032) ↗ open-webui/open-webui
  2. [2] Fail closed when the proxy/redirect path decode cap is exceeded (#26050) ↗ open-webui/open-webui
  3. [3] Encode terminal ws session_id to block upstream user_id query injection (#26042) ↗ open-webui/open-webui
  4. [4] fix: collapse Code Execution settings when toggle is disabled ↗ open-webui/open-webui
  5. [5] fix: deduplicate store fetches with null-guards and mutex ↗ open-webui/open-webui

$ ls open-webui/reviews/ # the step-back reads

the week in review Open WebUI 0.11.2 ships as nine security advisories land the month in review Open WebUI 0.11.1 adds tool approval, 0.11.2 fixes
Topics: Local LLMs AI / ML Full archive →

Quick answers

What shipped in Open WebUI on June 17, 2026?
Three merged commits close authorization and injection gaps in file access, proxy path decoding, and terminal WebSocket handling. In total, 72 commits and 47 pull requests landed.
Who contributed to Open WebUI on June 17, 2026?
2 developers shipped this update, including Classic298 and silentoplayz.
What were the notable Open WebUI updates?
Confer object-derived file write only for files the object owner owns (#26032), Fail closed when the proxy/redirect path decode cap is exceeded (#26050), and Encode terminal ws session_id to block upstream user_id query injection (#26042).
♥

$ log @open-webui --recent

Open WebUI ships five security fixes for auth and request handling 8 shipped Four breaking security advisories expose data and enable account takeover in Open WebUI 17 shipped Open WebUI 0.11.2 ships with tool parsing fix 90 shipped Fixes Redis Cluster stop, German catalog drift 8 shipped

$ log --all # elsewhere on the wire

@golang Fast-path receive buffer cleared on stream reset Meta React Native adds Stable API guards to renderer attributed string

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.