OpenWA vulnerabilities

1 known vulnerability in OpenWA from Rmyndharis. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  OpenWA: Missing Authorization

  CVE-2026-91160Sep 24, 2026Rmyndharis

  OpenWA is a free, open source, self-hosted WhatsApp API gateway. Prior to 0.23.5, the /events WebSocket gateway delivers the session.qr event to a VIEWER API key that subscribes by event name or through either wildcard subscription form, even though GET /api/s