{
 "id": "AIR-2026-0861",
 "slug": "cve-2026-59216-open-webui-cross-user-code-interpreter-and-to",
 "title": "CVE-2026-59216: Open WebUI cross-user code-interpreter and tool execution",
 "summary": "Open WebUI suffers from a session validation flaw in Socket.IO event handlers, enabling authenticated users to run code interpreters inside other users' active sessions. This allows attackers to hijack tool execution and run arbitrary commands.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Open WebUI"
 ],
 "incident_date": "2026-07-24",
 "incident_date_precision": "day",
 "first_reported": "2026-07-09",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59216",
   "publisher": "NVD",
   "title": "CVE-2026-59216: Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.",
   "published_at": "2026-07-09"
  },
  {
   "url": "https://github.com/advisories/GHSA-74h3-cxq7-vc5q",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-59216: Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id",
   "published_at": "2026-07-24"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-59216",
  "open-webui",
  "session-hijacking"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}