CyberRota Analysis
AI-GeneratedThe OAuth token exchange endpoint in Open WebUI versions 0.8.0 to 0.9.0 is vulnerable, allowing unauthorized accounts to obtain a session by bypassing the email domain allowlist enforced during standard OAuth login. This could lead to unauthorized access to user accounts and sensitive data. Organizations using affected versions should prioritize updating to version 0.9.0 to mitigate potential security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.9.0, Open WebUI's OAuth token exchange endpoint issues a session for a provider access token without applying the email domain allowlist that the normal OAuth login callback enforces. An account whose email domain the login callback would refuse could still obtain a working session through this endpoint. This issue is fixed in version 0.9.0.