EUVD-2026-16915Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A10:2025 - Mishandling of Exceptional Conditions
ASVS 5.0
V16 - Security Logging and Error Handling Error message sanitization
MITRE ATT&CK
1 technique across 1 tactic: Discovery The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | The CVSS v3.1 base score of 3.5 reflects low severity: attack vector requires local network adjacency (AV:A), low attack complexity (AC:L), and low privileges (PR:L), with confidentiality impact limited to low (C:L) and no integrity or availability impact. The EPSS score (E:P suggests proof-of-concept evidence in public exploits) indicates elevated exploitation probability beyond the base score alone. While KEV status is not confirmed as actively exploited at scale, publicly available exploit code (Gist reference) lowers the barrier to exploitation. The real-world risk is moderate but not critical: this requires local network access and authenticated credentials, significantly limiting exposure to external attackers. Organizations with strict network segmentation and privileged account controls will see lower practical risk; however, environments with permissive intra-network policies or shared development networks should prioritize remediation. |
| Exploit ScenarioDerived | An authenticated user on the same local network as an OpenUI deployment crafts a malicious API request with a specially crafted key parameter to the APIStatusError handler endpoint. The handler processes the request without sanitization and returns an error message containing sensitive information (such as system paths, configuration details, or internal state) that was embedded in the key value. The attacker captures this information from the HTTP response, gaining knowledge of the system's internal structure for follow-up attacks. Publicly available exploit code (hosted on GitHub Gist) automates this process, allowing attackers with minimal technical skill to execute the attack. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 28, 2026
Information disclosure in wandb OpenUI up to version 1.0/3.5-turb allows authenticated local network attackers to expose sensitive information through error messages in the APIStatusError handler by manipulating the key argument. Publicly available exploit code exists, and the vendor has not responded to early disclosure notification. Attack complexity is low and requires only local network access and low-level privileges.
RemediationAI
Upgrade wandb OpenUI to a version newer than 1.0 or 3.5-turb. Vendor patch version has not been independently confirmed from available data; contact wandb directly for latest security-patched release. As an interim workaround, restrict local network access to the OpenUI backend server to only trusted administrative networks and implement network-level access controls to limit exposure to the APIStatusError handler endpoints. Review application logs for suspicious key parameter manipulation attempts. Given the vendor's lack of response to early disclosure, monitor security advisory channels and community repositories for community-developed patches or alternative implementations.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability exists in the generic_exception_handler function within backend/openui/server.py, which handles APIStatusError exceptions. The root cause is improper error message sanitization (CWE-209: Information Exposure Through an Error Message), where user-supplied input in the key parameter is reflected directly into error responses without sanitization. This allows attackers to extract sensitive data that should not be exposed through exception handling paths. The affected product is wandb OpenUI, a web-based UI component for machine learning workflows, identified by CPE cpe:2.3:a:wandb:openui:*:*:*:*:*:*:*:*.
Know when Wandb gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability was found in wandb OpenUI up to 1.0/3.5-turb. Affected is the function generic_exception_handler of the file backend/openui/server.py of the component APIStatusError Handler. The manipulation of the argument key results in information exposure through error message. Access to the local network is required for this attack. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Executive ViewAI
Organizations using wandb OpenUI should be aware of moderate risk from CVE-2026-4994 rated CVSS 5.1. Exploitation could compromise the security of affected deployments. Proof-of-concept code is publicly available. Organizations should apply vendor updates when available and monitor for exploitation.
Apply vendor patch. If patching is delayed: restrict network access and enable monitoring.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Related Vulnerabilities in wandb OpenUI Multiple Vulnerabilities
View all 3Path traversal in the Weights & Biases (wandb) Python client before 0.29.0 lets a malicious or compromised W&B backend p
HTML injection in wandb OpenUI up to version 1.0 allows remote unauthenticated attackers to inject arbitrary HTML via ma
Artifact Integrity Validation in wandb 0.25.2.dev1 uses MD5 (a cryptographically broken hash algorithm) within ArtifactM
Exploit-DB