← Back

CVE-2026-0767

nvd nist
Published: Jan 23, 2026Modified: Sep 2, 2026

JSON object

Loading...

Description

Rejected reason: Open WebU's investigation showed that this describes the behavior of plain HTTP rather than a defect in the product. TLS termination is the operator's deployment decision, as it is for any backend that speaks HTTP, and not a security issue. https://docs.openwebui.com/security/vendor-dispositions/cve-2026-0767

Affected Products (1)

CPE details will appear after the next data sync.
Openwebui
1 product
Open Webui

Related CWEs

CWE-319
Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

Timeline

No history available yet.