Open WebUI - Authenticated Remote Code Execution via load_tool_module_by_id Function
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2026-0766. PoCs published by exploitintel, bitt0n.
AI-analyzed exploit summary The repository contains functional exploit code demonstrating CVE-2026-0766, a remote code execution vulnerability in Open WebUI via `exec()` code injection. The PoC scripts exploit multiple attack vectors (tool creation, function creation, and tool update) to achieve RCE as root.
Description
Open WebUI load_tool_module_by_id Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists within the load_tool_module_by_id function. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-28257.
Exploits (2)
The repository contains functional exploit code demonstrating CVE-2026-0766, a remote code execution vulnerability in Open WebUI via `exec()` code injection. The PoC scripts exploit multiple attack vectors (tool creation, function creation, and tool update) to achieve RCE as root.
This repository contains a functional proof-of-concept exploit for CVE-2026-0766, a remote code execution vulnerability in OpenWebUI. The exploit leverages unsafe use of Python's `exec()` function in the tool creation feature to achieve arbitrary code execution.
References (1)
Scores
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
