{"items":[{"id":"NVI-00014020","kind":"vulnerability","title":"Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite","revision":2,"unknowns":["Customer inventory, deployment, reachability and exploitation have not been inspected."],"lifecycle":"active","identifiers":["GHSA-wpmr-8h3q-fwj7","CVE-2026-87016"],"plain_summary":"GitHub lists this reviewed advisory for open-webui. Published version ranges and source prerequisites are shown below; this is not an inspection of a visitor’s application.","review_status":"source_listed","control_topics":[],"public_actions":[{"summary":"Identify the exact component and deployed version, examine the linked publisher’s conditions, and retain evidence of any mitigation.","source_ids":["sr-2dd1835c52f343e67b0140c87544f680"],"action_type":"investigate","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null}],"schema_version":"1.1.0","source_metrics":[{"kind":"CVSS","as_of":"2026-09-10T21:23:26.000Z","value":"8.1 high","meaning":"GitHub source severity; exploitability and local consequence require separate evidence.","source_id":"sr-32d63f749afa4b44a21ccc84b0c1ab5e"},{"kind":"EPSS","as_of":"2026-11-02T12:00:30.000Z","value":"0.599%","meaning":"FIRST EPSS model v2026.06.15; exploitation probability over 30 days, percentile 0.48686. Missing scores are unknown.","source_id":"sr-2dd1835c52f343e67b0140c87544f680"}],"why_it_matters":"Published affected context helps an owner decide what evidence to gather. This report has not examined your application.","related_sources":[{"id":"sr-32d63f749afa4b44a21ccc84b0c1ab5e","url":"https://github.com/advisories/GHSA-wpmr-8h3q-fwj7","basis":"vendor_advisory","notes":"GitHub Advisory Database; CC-BY-4.0. Each advisory links its original attribution. Null normalizes fields.","title":"GHSA-wpmr-8h3q-fwj7","publisher":"GitHub Advisory Database","observed_at":"2026-11-01T22:54:05.264Z"},{"id":"sr-2dd1835c52f343e67b0140c87544f680","url":"https://www.first.org/epss/data.html","basis":"official_catalog","notes":"FIRST EPSS; probability of exploitation in the next 30 days, not local compromise. Dataset date/model retained; FIRST services terms apply.","title":"CVE-2026-87016","publisher":"FIRST EPSS","observed_at":"2026-11-02T20:17:01.143Z"}],"affected_context":[{"certainty":"source_listed","source_ids":["sr-32d63f749afa4b44a21ccc84b0c1ab5e"],"technology":"open-webui","known_exclusions":[],"conditions_summary":"## Summary\n\nOn SQLite deployments, the lookup that maps an external identity to a local account does a substring match instead of an exact match. A subject value containing SQL wildcard characters therefore matches accounts the value was never issued for, and the sign-in binds to whichever account the database returns first, which can be an administrator. The same defect affects SCIM external-ID resolution. PostgreSQL deployments are not affected, because they take a separate and correct code path.\n\n## Preconditions\n\n* The database is SQLite. This is the default backend. PostgreSQL deployments are not affected at all.\n* OAuth or OIDC sign-in is configured, or SCIM provisioning is enabled. Both are off by default.\n* For an attacker to steer the match deliberately, they must control the value of the claim Open WebUI uses as the subject. That value is normally assigned by the identity provider and is not attacker-controlled: the shipped GitHub and Feishu configurations use provider-assigned numeric identifiers, and a standard OIDC `sub` is provider-assigned. The deliberate case therefore requires an operator to have pointed `OAUTH_SUB_CLAIM` at a claim the end user can set at the iden","public_affected_ranges":[">= 0.6.41, < 0.11.1"]}],"null_published_at":"2026-11-08T19:53:38.921Z","source_updated_at":"2026-09-10T21:23:26.000Z","source_disclosed_at":"2026-09-10T21:23:25.000Z","is_synthetic_fixture":false,"null_last_reviewed_at":null,"public_change_summary":"Dated EPSS estimate updated; this is not a new disclosure or proof of exploitation.","null_first_observed_at":"2026-11-01T22:54:05.264Z"},{"id":"NVI-00014020","kind":"vulnerability","title":"Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite","revision":1,"unknowns":["Customer inventory, deployment, reachability and exploitation have not been inspected."],"lifecycle":"active","identifiers":["GHSA-wpmr-8h3q-fwj7","CVE-2026-87016"],"plain_summary":"GitHub lists this reviewed advisory for open-webui. Published version ranges and source prerequisites are shown below; this is not an inspection of a visitor’s application.","review_status":"source_listed","control_topics":[],"public_actions":[{"summary":"Identify the exact component and deployed version, examine the linked publisher’s conditions, and retain evidence of any mitigation.","source_ids":["sr-32d63f749afa4b44a21ccc84b0c1ab5e"],"action_type":"investigate","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null}],"schema_version":"1.1.0","source_metrics":[{"kind":"CVSS","as_of":"2026-09-10T21:23:26.000Z","value":"8.1 high","meaning":"GitHub source severity; exploitability and local consequence require separate evidence.","source_id":"sr-32d63f749afa4b44a21ccc84b0c1ab5e"}],"why_it_matters":"Published affected context helps an owner decide what evidence to gather. This report has not examined your application.","related_sources":[{"id":"sr-32d63f749afa4b44a21ccc84b0c1ab5e","url":"https://github.com/advisories/GHSA-wpmr-8h3q-fwj7","basis":"vendor_advisory","notes":"GitHub Advisory Database; CC-BY-4.0. Each advisory links its original attribution. Null normalizes fields.","title":"GHSA-wpmr-8h3q-fwj7","publisher":"GitHub Advisory Database","observed_at":"2026-11-01T22:54:05.264Z"}],"affected_context":[{"certainty":"source_listed","source_ids":["sr-32d63f749afa4b44a21ccc84b0c1ab5e"],"technology":"open-webui","known_exclusions":[],"conditions_summary":"## Summary\n\nOn SQLite deployments, the lookup that maps an external identity to a local account does a substring match instead of an exact match. A subject value containing SQL wildcard characters therefore matches accounts the value was never issued for, and the sign-in binds to whichever account the database returns first, which can be an administrator. The same defect affects SCIM external-ID resolution. PostgreSQL deployments are not affected, because they take a separate and correct code path.\n\n## Preconditions\n\n* The database is SQLite. This is the default backend. PostgreSQL deployments are not affected at all.\n* OAuth or OIDC sign-in is configured, or SCIM provisioning is enabled. Both are off by default.\n* For an attacker to steer the match deliberately, they must control the value of the claim Open WebUI uses as the subject. That value is normally assigned by the identity provider and is not attacker-controlled: the shipped GitHub and Feishu configurations use provider-assigned numeric identifiers, and a standard OIDC `sub` is provider-assigned. The deliberate case therefore requires an operator to have pointed `OAUTH_SUB_CLAIM` at a claim the end user can set at the iden","public_affected_ranges":[">= 0.6.41, < 0.11.1"]}],"null_published_at":"2026-11-02T10:00:37.197Z","source_updated_at":"2026-09-10T21:23:26.000Z","source_disclosed_at":"2026-09-10T21:23:25.000Z","is_synthetic_fixture":false,"null_last_reviewed_at":null,"public_change_summary":"First indexed by Null; source disclosure date is shown separately.","null_first_observed_at":"2026-11-01T22:54:05.264Z"}],"next_cursor":null,"snapshot_revision":"42594"}