open-webui-apilisted

# Open WebUI REST API administration — operator reference Target: operators who script Open WebUI (create users, reconcile model catalogs, drive RAG pipelines, export configs) instead of clicking the admin UI. Grounded in v0.11.0 source (2026-07-27); the API is officially "experimental" with no versioning policy, so every claim here is version-stamped. **First step on any instance: `GET /api/version`** — never trust `openapi.json`'s `info.version` (always says "0.1.0"). ## Security floor: v0.11.1 — above this skill's own grounding tag **Run v0.11.1+ (v0.11.4 is the sensible target).** Note what that means here: this file is grounded in **v0.11.0 source**, which is *below* the floor. The file:line claims still describe 0.11.0 accurately; the instance you point them at should not be on it. Every published advisory (feed checked 2026-09-24, newest 2026-09-09) is patched at 0.11.1. **But v0.11.2's release notes announce security and access-control fixes that are withheld from disclosure for now** — treat **v0.11.2 as the practical floor** and re-check the advisory feed when new GHSAs appear: expect them to raise the published floor to 0.11.2. Four of the advisories defeat things this skill teaches, so knowing the version comes before trusting the permission model: | CVE | Affected | Defeats | |-----|----------|---------| | CVE-2026-87016 | `>= 0.6.41, < 0.11.1` | **Sign in as another user** — wildcard characters in the OAuth subject claim, **on SQLite** | | CVE-2026-70482 |