{
 "id": "AIR-2026-0104",
 "slug": "cve-2026-88006-open-webui-oauth-role-management-bypass-vulne",
 "title": "CVE-2026-88006: Open WebUI OAuth role management bypass vulnerability",
 "summary": "Open WebUI's OAuth token exchange endpoint issues sessions for provider access tokens without running normal role management callbacks. This allows users to obtain sessions with existing roles even if provider roles would normally be demoted or refused.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Open WebUI"
 ],
 "incident_date": "2026-09-10",
 "incident_date_precision": "day",
 "first_reported": "2026-09-10",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88006",
   "publisher": "NVD",
   "title": "CVE-2026-88006: Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.",
   "published_at": "2026-09-10"
  },
  {
   "url": "https://github.com/advisories/GHSA-wvm9-9g5j-623f",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-88006: Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange",
   "published_at": "2026-09-10"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-88006",
  "open-webui",
  "oauth"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T07:00:14.101Z"
}