Open WebUI: Authenticated users can bypass model access control via exposed query parameter [AI-ASSISTED]
Moderate severity
GitHub Reviewed
Published
May 10, 2026
in
open-webui/open-webui
•
Updated May 14, 2026
Give feedback on Dependabot alerts