RepoJournal
Open WebUI @open-webui
73 wires and counting

$ follow Open WebUI

Keep up with Open WebUI in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-05
stories 8
GitHub RSS Archive Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

Open WebUI ships five security fixes for auth and request handling

By RepoJournal · Filed · About Open WebUI

Open WebUI patched five security issues, including a server-stalling unauthenticated request and an SSO role sync flaw that leaves demoted admins with full note access.

Open WebUI addressed five security issues, all breaking, that affect authentication and request handling. The most severe allows unauthenticated requests to stall the server via uncached OIDC fetches in back-channel logout [1]. Any authenticated user can also start a non-terminating request by creating a folder parent cycle [2], and a non-numeric alert value lets any authenticated user suppress calendar alerts instance-wide [3].

Two flaws concern privilege boundaries. An admin demoted through SSO role sync retains read and write access to all users' notes [4], and a user's session cookies are sent to tool servers configured for bearer authentication [5]. The session cookie leak is a direct credential exposure; the SSO demotion flaw means demotion does not actually revoke note access.

Upgrade Open WebUI to a patched release before continuing to expose it to untrusted users or external networks. The unauthenticated stall and cookie leak warrant immediate attention, while the alert suppression and folder cycle issues are lower urgency but still need a fix.

Action items

References

  1. [1] Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout open-webui/open-webui ↗
  2. [2] Any authenticated user can start a non-terminating request via a folder parent cycle open-webui/open-webui ↗
  3. [3] Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value open-webui/open-webui ↗
  4. [4] Admin demoted through SSO role sync keeps read and write access to all users' notes open-webui/open-webui ↗
  5. [5] A user's session cookies are sent to tool servers configured for bearer authentication open-webui/open-webui ↗

$ ls open-webui/reviews/ # the step-back reads

the week in review Open WebUI 0.11.2 ships as nine security advisories land the month in review Open WebUI 0.11.1 adds tool approval, 0.11.2 fixes
Topics: Local LLMs AI / ML Full archive →

Quick answers

What shipped in Open WebUI on September 5, 2026?
Open WebUI patched five security issues, including a server-stalling unauthenticated request and an SSO role sync flaw that leaves demoted admins with full note access. In total, 1 commits, 1 pull requests, and 6 security advisories landed.
What were the notable Open WebUI updates?
Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout, Any authenticated user can start a non-terminating request via a folder parent cycle, and Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value.
♥

$ log @open-webui --recent

Four breaking security advisories expose data and enable account takeover in Open WebUI 17 shipped Open WebUI 0.11.2 ships with tool parsing fix 90 shipped Fixes Redis Cluster stop, German catalog drift 8 shipped Polish and zh-CN translations complete; touch zoom buttons hidden 18 shipped

$ log --all # elsewhere on the wire

@golang Fast-path receive buffer cleared on stream reset Meta React Native adds Stable API guards to renderer attributed string

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.