Executive brief
Open WebUI's plugin extension system allows users with appropriate permissions to author Python code that executes server-side. After investigation, this was determined to be designed functionality rather than a security vulnerability, as the execution model is intentional and does not bypass access controls.
Technical details
This report concerns the plugin extension system in Open WebUI, which allows users granted plugin authoring permissions to write and execute Python code on the server. Investigation determined that server-side code execution by authorized plugin authors is an intentional design feature of the extension system, not a security vulnerability. Users who lack plugin authoring permissions cannot exploit this functionality, and the capability is restricted to trusted parties. No security patch is required as this represents expected behavior within the defined threat model.
Affected products
- Open WebUI Open WebUI
Timeline
- 2026-01-23: disclosed
- advisory: Dispositioned as not a security issue; intended functionality