{"id":"CVE-2026-0767","state":"REJECTED","title":"Open WebU's investigation showed that this describes the behavior of plain HTTP rather than a defect in the product. TLS termination is the operator's deployment decision, as it is","description":"Open WebU's investigation showed that this describes the behavior of plain HTTP rather than a defect in the product. TLS termination is the operator's deployment decision, as it is for any backend that speaks HTTP, and not a security issue. https://docs.openwebui.com/security/vendor-dispositions/cve-2026-0767","publishedAt":"2026-01-23T03:28:39.523Z","updatedAt":"2026-09-02T17:34:15.123Z","severity":null,"assigner":"zdi","products":[],"affected":[],"references":[],"weaknesses":[],"ingestedAt":"2026-10-29T20:10:13.529Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/0xxx/CVE-2026-0767.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-0767","state":"REJECTED","datePublished":"2026-01-23T03:28:39.523Z","dateUpdated":"2026-09-02T17:34:15.123Z","assignerShortName":"zdi","assignerOrgId":"99f1926a-a320-47d8-bbb5-42feb611262e","dateReserved":"2026-01-08T22:50:10.918Z","dateRejected":"2026-09-02T17:27:29.647Z"},"containers":{"cna":{"rejectedReasons":[{"lang":"en","value":"Open WebU's investigation showed that this describes the behavior of plain HTTP rather than a defect in the product. TLS termination is the operator's deployment decision, as it is for any backend that speaks HTTP, and not a security issue. https://docs.openwebui.com/security/vendor-dispositions/cve-2026-0767"}],"providerMetadata":{"shortName":"zdi","orgId":"99f1926a-a320-47d8-bbb5-42feb611262e","dateUpdated":"2026-09-02T17:34:15.123Z"},"x_generator":{"engine":"Vulnogram 1.0.5"}}}}}