RepoJournal
Open WebUI @open-webui
73 wires and counting

$ follow Open WebUI

Keep up with Open WebUI in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-01
stories 17
GitHub RSS Archive Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

Four breaking security advisories expose data and enable account takeover in Open WebUI

By RepoJournal · Filed · About Open WebUI

Classic298
1 person shipped this
Classic298 @Classic298 1 cited

Open WebUI shipped a chore changelog rebuild alongside disclosures of four serious vulnerabilities, including same-origin XSS to account takeover.

Open WebUI's latest releases disclose four breaking vulnerabilities. The most severe is a same-origin XSS via the terminal port-preview iframe that hardcodes allow-same-origin, enabling account takeover [1]. Also breaking: the built-in knowledge tool exposes inaccessible knowledge bases on most vector backends [2], and channel members can overwrite another member's message via the chat completions endpoint [3]. A separate SSRF into internal services arises from DNS rebinding in the Playwright web loader [4].

The changelog describes rebuilding the 0.11.3 section: "Added now holds the contrast accessibility mode gives the dropdown menus, their submenus and the model picker, followed by the general improvements placeholder and the translation entry in their reserved positions" [5]. This is a maintenance commit with no functional change.

Action items

References

  1. [1] Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin open-webui/open-webui ↗
  2. [2] Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends open-webui/open-webui ↗
  3. [3] Channel members can overwrite another member's message via the chat completions endpoint open-webui/open-webui ↗
  4. [4] SSRF into internal services via DNS rebinding in the Playwright web loader open-webui/open-webui ↗
  5. [5] chore: rebuild the 0.11.3 changelog section (#29307) ↗ open-webui/open-webui

$ ls open-webui/reviews/ # the step-back reads

the week in review Open WebUI 0.11.2 ships as nine security advisories land the month in review Open WebUI 0.11.1 adds tool approval, 0.11.2 fixes
Topics: Local LLMs AI / ML Full archive →

Quick answers

What shipped in Open WebUI on September 1, 2026?
Open WebUI shipped a chore changelog rebuild alongside disclosures of four serious vulnerabilities, including same-origin XSS to account takeover. In total, 9 commits, 3 pull requests, 1 releases, and 4 security advisories landed.
Who contributed to Open WebUI on September 1, 2026?
1 developer shipped this update, including Classic298.
What were the notable Open WebUI updates?
Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin, Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends, and Channel members can overwrite another member's message via the chat completions endpoint.
♥

$ log @open-webui --recent

Open WebUI ships five security fixes for auth and request handling 8 shipped Open WebUI 0.11.2 ships with tool parsing fix 90 shipped Fixes Redis Cluster stop, German catalog drift 8 shipped Polish and zh-CN translations complete; touch zoom buttons hidden 18 shipped

$ log --all # elsewhere on the wire

@golang Fast-path receive buffer cleared on stream reset Meta React Native adds Stable API guards to renderer attributed string

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.