Tool-Creation โ€” PoC Archivehttps://poc.intelseclab.com/tags/tool-creation/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000OpenWebUI "Tools" Unsandboxed exec() Remote Code Execution โ€” CVE-2026-0766https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0766-openwebui-tool-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0766-openwebui-tool-rce/High severity (CVSS 8.8) โ€” web ยท CVE-2026-0766 (ZDI-26-032, GHSA-cggw-334c-f4mj). Status: Weaponized. Affects: OpenWebUI (self-hosted LLM web interface). Tags: openwebui, llm, code-injection, exec, tool-creation, cwe-94, rce, authenticated.webHighopenwebuillmcode-injectionexectool-creationcwe-94rceauthenticated