CVE-2026-0766
Rejected reason: Open WebU's investigation further investigation showed that this is intended functionality of the Plugins extension system,
CVSS
—
No CVSS
EPSS
26.0%
p98
KEV
—
Exploit Today
29
0-100
Published: Jan 23, 2026 · Last modified: Sep 2, 2026
Not enough EPSS history yet.
Rejected reason: Open WebU's investigation further investigation showed that this is intended functionality of the Plugins extension system, in which users granted the relevant permission author Python that the server executes by design, and not a security issue. https://docs.openwebui.com/security/vendor-dispositions/cve-2026-0766
No related CVEs by CWE or product.