CVE-2026-45672: Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed

May 14, 2026 (updated May 15, 2026)

The /api/v1/utils/code/execute endpoint executes arbitrary Python code via Jupyter for any verified user, even when the admin has set ENABLE_CODE_EXECUTION=false. The feature gate is not enforced on the API endpoint — the configuration says “disabled” but code still executes.

References

github.com/advisories/GHSA-482j-2pq6-q5w4
github.com/open-webui/open-webui/commit/6d736d3c598dbe49488675ed42845e00b62dfcba
github.com/open-webui/open-webui/releases/tag/v0.8.12
github.com/open-webui/open-webui/security/advisories/GHSA-482j-2pq6-q5w4
nvd.nist.gov/vuln/detail/CVE-2026-45672

Code Behaviors & Features

Detect and mitigate CVE-2026-45672 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →