---
id: "CVE-2026-116108"
kind: "vulnerability"
aliases: ["CVE-2026-116108"]
title: "OpenBB: local API server has improper access controls, remotely exploitable"
severity: "medium"
cvss: 5.0
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "openbb", "fixed": [], "affected": "4.7.0 - 4.7.2, 5.0.0", "ecosystem": "pypi"}]
ecosystems: []
tags: ["ai-tooling", "fastapi", "openbb", "python", "self-hosted"]
not_affected_if: ["api-server-not-running", "loopback-only-bind"]
published_at: "2026-10-26T02:17:06+00:00"
first_seen_at: "2026-10-26T02:39:11+00:00"
updated_at: "2026-10-26T02:40:44+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116108", "first_seen_at": "2026-10-26T02:39:11+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-26T02:40:44+00:00"}]
---

# OpenBB: local API server has improper access controls, remotely exploitable

OpenBB's Local API Server (api_settings.py) has an access control flaw (CWE-284) reported by VulDB. Impact is confidentiality only, and it needs user interaction. VulDB lists a proof of concept, but I could not find a public link. The vendor has not responded and there is no fix.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- pypi:openbb affected 4.7.0 - 4.7.2, 5.0.0 fixed ?

## How to check

- Run `pip show openbb openbb-core`. VulDB lists 4.7.0, 4.7.1, 4.7.2 and 5.0 as affected.
- Check whether `openbb-api` or `uvicorn openbb_core.api.rest_api:app` is running. Docs say openbb-api binds 127.0.0.1:6900 and uvicorn binds 127.0.0.1:8000 by default.
- Look for `--host 0.0.0.0` or a container deployment, which makes the server reachable from other machines.
- Check `~/.openbb_platform/system_settings.json` for api_settings.cors.allow_origins. The documented example uses `*`.

## Fix

No fixed version known. The vendor did not respond to the disclosure. Until one ships, keep the server on loopback, enable OPENBB_API_AUTH, restrict CORS origins, or stop it when not in use.

## Timeline

- 2026-10-26T02:39:11+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116108
- 2026-10-26T02:40:44+00:00 analyst — VulDB (VDB-426176) is the only advisory; vendor silent, no fix version, no public PoC link, details of the bypass not published. OpenBB docs: openbb-api binds 127.0.0.1:6900, uvicorn default 127.0.0.1:8000, no auth by default, api_settings CORS defaults to '*' (docs only; not confirmed as the flaw). VulDB says user interaction needed, confidentiality impact only.

## Documents

- [advisory] VDB-426176 OpenBB Local API Server api_settings.py access control https://vuldb.com/vuln/426176
- [mentions] OpenBB REST API Quick Start (binds 127.0.0.1:6900 / uvicorn 127.0.0.1:8000) https://docs.openbb.co/odp/python/quickstart/rest_api
- [mentions] OpenBB System Settings: api_settings default CORS allow_origins * https://docs.openbb.co/odp/python/settings/system_settings

## From the sources

A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the file openbb_platform/core/openbb_core/app/model/api_settings.py of the component Local API Server. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_