Post
STACKFLAG
stackflag.bsky.social
did:plc:zhe53h7ajlloep2oso5pqxzj
CVE-2026-109286
Versions of Open WebUI from 0.7.0 up to 0.11.3 let any website trick a logged‑in user into revealing their session token. An attacker could then act as that user and access the full API. Upgrade Open WebUI to…
Too many irrelevant or confusing CVEs? Use stackflag.com
#CVE #infosec
https://stackflag.com/vulnerabilities/cve-2026-109286?utm_source=bluesky&utm_medium=social&utm_campaign=cve_poster&utm_content=cve-2026-109286
2026-10-13T04:30:03.857Z