VULNERABILITY INTELLIGENCE

CVE-2026-0767

CVSS score6.5 MEDIUM

CISA KEVNot currently listed

Published2026-01-23

Last modified2026-09-02

CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Rejected reason: Open WebU's investigation showed that this describes the behavior of plain HTTP rather than a defect in the product. TLS termination is the operator's deployment decision, as it is for any backend that speaks HTTP, and not a security issue. https://docs.openwebui.com/security/vendor-dispositions/cve-2026-0767