Vulnerability · Published May 15, 2026 · Assigned by GitHub_M

CVE-2026-44551Open WebUI: LDAP Empty Password Authentication Bypass

Critical 9.1

In plain English

A critical-severity improper authentication in open-webui from open-webui. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 74% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.1Critical

Exploit odds (30 days)1.5%top 26.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Nuclei

Official description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP authentication endpoint does not validate that the submitted password is non-empty before performing a Simple Bind against the LDAP server. The LdapForm Pydantic model accepts password: str with no minimum length constraint, so an empty string passes validation. The subsequent Connection.bind() call succeeds on vulnerable LDAP servers, and the application issues a full session token for the target user. This vulnerability is fixed in 0.9.0.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	open-webui	0.9.0	GHSA-2r4p-jpmg-48f4
PyPI	open-webui	0.9.0	PYSEC-2026-435

Affected products (as reported)

Vendor	Product	Versions
open-webui	open-webui	< 0.9.0

Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

https://github.com/open-webui/open-webui/security/advisories/GHSA-2r4p-jpmg-48f4 x_refsource_CONFIRM