Security readout for executives and security teams
Plain-English summary
CVE-2026-0767 affects Open WebUI 0.6.32 and may expose credentials because sensitive information is transmitted in plaintext. An attacker on an adjacent network could capture those credentials without logging in first. Business impact depends on where Open WebUI is deployed and what privileges captured credentials provide.
Executive priority
Treat as a moderate confidentiality risk. Prioritize review if Open WebUI handles privileged credentials or is accessible on shared networks. The main business concern is credential theft leading to broader access, not direct system takeover from the described flaw.
Technical view
The flaw is categorized as CWE-319, cleartext transmission of sensitive information. ZDI describes the issue as credential handling at an endpoint that transmits sensitive data in plaintext. CVSS 3.0 is 5.3: network-adjacent attack vector, high attack complexity, no privileges, no user interaction, and high confidentiality impact.
Likely exposure
Exposure is most relevant where Open WebUI 0.6.32 is reachable from shared, local, or otherwise adjacent networks. Internet-wide exposure is not stated in the sources. Authentication is not required, but the attacker must be positioned to observe affected traffic.
Exploitation context
No cited source states active exploitation, and the CVE is not listed as KEV in the provided bundle. Exploitation requires network adjacency and favorable conditions to capture plaintext credential transmission. Successful credential disclosure could enable follow-on compromise depending on credential scope.
Researcher notes
Public details are limited. The affected version listed is Open WebUI 0.6.32, with default status unknown. The advisory identifies plaintext credential transmission at an endpoint but does not provide endpoint names, patch details, or exploit status in the supplied sources.
Mitigation direction
- Identify any Open WebUI 0.6.32 deployments.
- Check Open WebUI and ZDI guidance for fixed versions or vendor mitigations.
- Limit access to Open WebUI from untrusted or shared networks.
- Ensure credentials are not transmitted over unencrypted channels.
- Rotate credentials if plaintext exposure is suspected.
Validation and detection
- Confirm deployed Open WebUI versions and compare against 0.6.32.
- Review configuration and traffic handling for encrypted credential transmission.
- Check logs and network monitoring for unexpected credential exposure indicators.
- Verify whether vendor guidance or updates have been applied.
- Document network segments where Open WebUI is reachable.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-319: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2026-0767 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 5.3 (3.0)
- Known Exploited
- No
- Published
Vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N1.63.6Primary CVE scoreVulnerability scoring details
Base CVSS 3.0 score
5.3MediumVector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Source materials
- CVE List V5 sourceCVE List V5
- ZDI-26-033CVE reference · x_research-advisory
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Cleartext Transmission of Sensitive Information
Cleartext Transmission of Sensitive Information represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.