{"uuid": "d86ab5ed-434d-458f-a79c-ee9335694508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87012", "type": "seen", "source": "https://gist.github.com/alon710/e350315aab7316ce10d2d2056b580adf", "content": "# CVE-2026-87012: CVE-2026-87012: Instance-Wide Denial of Service via Calendar Alert Metadata Type Confusion in Open WebUI\n\n> **CVSS Score:** 4.3\n> **Published:** 2026-09-10\n> **Full Report:** https://cvereports.com/reports/CVE-2026-87012\n\n## Summary\nOpen WebUI is a self-hosted AI platform. Versions 0.9.0 through 0.11.0 contain a denial-of-service vulnerability where an authenticated user can inject non-numeric values into calendar event alert metadata. The shared scheduler process fails to validate the type, leading to an unhandled TypeError that halts the execution of instance-wide alerts, suppressing notifications for all users.\n\n## TL;DR\nAn authenticated attacker can crash the shared Open WebUI background scheduler by sending non-numeric values in calendar event metadata, resulting in instance-wide suppression of all calendar alerts.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-1287, CWE-754\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 4.3 (Medium)\n- **EPSS Score**: 0.00268 (18.83% percentile)\n- **Impact**: Denial of Service (Instance-wide alert suppression)\n- **Exploit Status**: PoC concept, no public exploits\n- **KEV Status**: Not listed in CISA KEV\n\n## Affected Systems\n\n- Open WebUI self-hosted AI platforms\n- **Open WebUI**: >= 0.9.0, < 0.11.1 (Fixed in: `0.11.1`)\n\n## Mitigation\n\n- Upgrade Open WebUI to version 0.11.1 or higher\n- Implement write-path validation on API input payloads\n- Sanitize database entries using SQL query to strip non-numeric alert_minutes\n\n**Remediation Steps:**\n1. Identify running Open WebUI container\n2. Pull the latest official Docker image 'ghcr.io/open-webui/open-webui:v0.11.1'\n3. Restart the application to apply the changes\n4. Optionally audit database for legacy malformed calendar events\n\n## References\n\n- [GitHub Security Advisory GHSA-v39v-59xw-j98g](https://github.com/open-webui/open-webui/security/advisories/GHSA-v39v-59xw-j98g)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-87012) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-11T14:31:53.169596Z"}