Which versions of Openui are affected by CVE-2026-4994?

Organizations using wandb OpenUI should be aware of moderate risk from CVE-2026-4994 rated CVSS 5.1. Exploitation could compromise the security of affected deployments.

Is there a public PoC exploit available for CVE-2026-4994?

Yes, a public proof-of-concept exploit is available for CVE-2026-4994. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-4994?

Within 30 days: Identify affected systems running wandb OpenUI and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Openui CVE-2026-4994

Q: What is the CVSS score of CVE-2026-4994?

CVE-2026-4994 has a CVSS 4.0 base score of 2.0 (Low). CVSS vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-16915 LOW

Error Message Information Leak (CWE-209)

2026-03-28 VulDB

Information Disclosure Openui Wandb

2.0

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.0 LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

5.1 (MEDIUM) 2.0 (LOW)

PoC Detected

Mar 30, 2026 - 13:26 vuln.today

Public exploit code

EUVD ID Assigned

Mar 28, 2026 - 09:30 euvd

EUVD-2026-16915

Analysis Generated

Mar 28, 2026 - 09:30 vuln.today

CVE Published

Mar 28, 2026 - 09:15 nvd

MEDIUM 5.1

DescriptionCVE.org

A vulnerability was found in wandb OpenUI up to 1.0/3.5-turb. Affected is the function generic_exception_handler of the file backend/openui/server.py of the component APIStatusError Handler. The manipulation of the argument key results in information exposure through error message. Access to the local network is required for this attack. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Information disclosure in wandb OpenUI up to version 1.0/3.5-turb allows authenticated local network attackers to expose sensitive information through error messages in the APIStatusError handler by manipulating the key argument. Publicly available exploit code exists, and the vendor has not responded to early disclosure notification. Attack complexity is low and requires only local network access and low-level privileges.

Technical ContextAI

The vulnerability exists in the generic_exception_handler function within backend/openui/server.py, which handles APIStatusError exceptions. The root cause is improper error message sanitization (CWE-209: Information Exposure Through an Error Message), where user-supplied input in the key parameter is reflected directly into error responses without sanitization. This allows attackers to extract sensitive data that should not be exposed through exception handling paths. The affected product is wandb OpenUI, a web-based UI component for machine learning workflows, identified by CPE cpe:2.3:a:wandb:openui:*:*:*:*:*:*:*:*.

RemediationAI

Upgrade wandb OpenUI to a version newer than 1.0 or 3.5-turb. Vendor patch version has not been independently confirmed from available data; contact wandb directly for latest security-patched release. As an interim workaround, restrict local network access to the OpenUI backend server to only trusted administrative networks and implement network-level access controls to limit exposure to the APIStatusError handler endpoints. Review application logs for suspicious key parameter manipulation attempts. Given the vendor's lack of response to early disclosure, monitor security advisory channels and community repositories for community-developed patches or alternative implementations.