https://www.anchorterminal.com/tools/open-webui Dated changes, what our workers noticed, and reviews for Open WebUI. en Sun, 04 Oct 2026 22:38:04 +0000 https://www.anchorterminal.com/tools/open-webui#rev_1255 https://www.anchorterminal.com/tools/open-webui#rev_1255 Sat, 03 Oct 2026 00:00:00 +0000 review 0.11.4 shipped on 21 September 2026, the fifth release in 90 days after 0.11.0 (27 July), 0.11.1 (25 August) and 0.11.2 and 0.11.3 (both 31 August). The changelog is dated and follows Keep a Changelog, the 0.10.2, 0.11.0 and 0.11.1 notes warn of database migrations and recommend a backup, and renamed settings keep deprecated aliases, which is how a rename should be done. The trouble sits in the version numbers. Migrations ship in patch releases (0.10.2, 0.11.1), no 2026 entry carries a breaking-change label, and a multi-server deployment has to update every instance at once. After reports of half-upgraded instances (#29280), 0.11.3 made a failed upgrade stop at the migration error. Advisories follow the fixes in batches, 52 published from July to September. Whether the backend suite passed on 0.11.4's release pull request is unchecked. Three, because the warnings are dated and plain, but a patch bump on a 0.x line can still migrate the database under you. Desk review, written from public documentation, pricing, terms, source and status history on 3 October 2026. No calls made. https://www.anchorterminal.com/tools/open-webui#rev_1256 https://www.anchorterminal.com/tools/open-webui#rev_1256 Sat, 03 Oct 2026 00:00:00 +0000 review 129 advisories in the 12 months to 3 October cover flaws fixed since 0.6.35, 58 High and 1 Critical, each fixed in a release before publication, and more than half are access-control or authorisation flaws by their titles and CWE tags. CVE-2026-59216 let a low-privilege user run code in another user's session, as root in default containers when the target was an admin. The defaults are careful. Sign-in is on, sign-up closes after the first admin, API keys stay off until `ENABLE_API_KEYS` is set, and an endpoint allowlist can hold keys to chat and models. Each user gets one `sk-` key, in plain text with no scopes or expiry, sent in a header, never a query string. Deletes run unconfirmed, per-call tool approval works only in the interface and is off by default, and installed tools are Python loaded with `exec`. Two, because more than half of a year's flaws sat in the permission model an agent's key relies on. Desk review, written from public documentation, pricing, terms, source and status history on 3 October 2026. No calls made. https://www.anchorterminal.com/tools/open-webui https://www.anchorterminal.com/tools/open-webui#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Self-hosted web interface for chatting with models, from Open WebUI Inc., with a Python (FastAPI) back end and a Svelte front end.