CVE-2026-88002: Open WebUI: Any authenticated user can hang the server via a cyclic chat message history
Chat histories are stored as an unvalidated JSON object. The walk that reconstructs a chat’s message chain detected repeats using each message’s own id field while moving through the history by map key, so a message that simply omitted id was never recorded as visited. A history whose messages referenced each other in a parent cycle therefore made the walk run forever. Any account with the default user role could store such a chat and trigger the walk, blocking the server for everyone.
References
- github.com/advisories/GHSA-jqhh-cjmq-vmv6
- github.com/open-webui/open-webui/commit/5c79ccc9e5c9efc2bc024d8f0b9757652ece929a
- github.com/open-webui/open-webui/pull/28034
- github.com/open-webui/open-webui/releases/tag/v0.11.1
- github.com/open-webui/open-webui/security/advisories/GHSA-jqhh-cjmq-vmv6
- nvd.nist.gov/vuln/detail/CVE-2026-88002
Code Behaviors & Features
Detect and mitigate CVE-2026-88002 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →