I have searched the existing issues and discussions.
I am using the latest version of Open WebUI.
Installation Method
Docker
Open WebUI Version
0.6.9
Ollama Version (if applicable)
N/A
Operating System
Ubuntu 22.04
Browser (if applicable)
Arc
Confirmation
I have read and followed all instructions in README.md.
I am using the latest version of both Open WebUI and Ollama.
I have included the browser console logs.
I have included the Docker container logs.
I have listed steps to reproduce the bug in detail.
Expected Behavior
No logging of backend config to browser console.
Actual Behavior
The backend config is being logged to the browser console, exposing sensitive configuration data that should not be visible to users. The following code in the frontend is causing the issue:
This exposes potentially sensitive configuration details to anyone who opens the browser console, which presents a security risk.
Originally created by @MariusWilsch on GitHub (May 19, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/14032
### Check Existing Issues
- [x] I have searched the existing issues and discussions.
- [x] I am using the latest version of Open WebUI.
### Installation Method
Docker
### Open WebUI Version
0.6.9
### Ollama Version (if applicable)
N/A
### Operating System
Ubuntu 22.04
### Browser (if applicable)
Arc
### Confirmation
- [x] I have read and followed all instructions in `README.md`.
- [x] I am using the latest version of **both** Open WebUI and Ollama.
- [x] I have included the browser console logs.
- [x] I have included the Docker container logs.
- [x] I have listed steps to reproduce the bug in detail.
### Expected Behavior
No logging of backend config to browser console.
### Actual Behavior
The backend config is being logged to the browser console, exposing sensitive configuration data that should not be visible to users. The following code in the frontend is causing the issue:
```js
let backendConfig = null;
try {
backendConfig = await getBackendConfig();
console.log('Backend config:', backendConfig);
} catch (error) {
console.error('Error loading backend config:', error);
}
```
Setting `GLOBAL_LOG_LEVEL` to `WARNING` or `CRITICAL` does not affect frontend logging behavior.
### Steps to Reproduce
1. Deploy OpenWebUI v0.6.9 using Docker
2. Open browser and navigate to the OpenWebUI URL
3. Open developer tools (F12) and check the console
4. Observe backend configuration being printed to console on every page load/auth redirect
### Logs & Screenshots
```
Backend config:
{status: true, name: 'Open WebUI', version: '0.6.9', default_locale: '', oauth: {…}, …}
```
### Security Concern
This exposes potentially sensitive configuration details to anyone who opens the browser console, which presents a security risk.
GiteaMirror
added the bug label 2026-05-15 12:19:26 -05:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @MariusWilsch on GitHub (May 19, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/14032
Check Existing Issues
Installation Method
Docker
Open WebUI Version
0.6.9
Ollama Version (if applicable)
N/A
Operating System
Ubuntu 22.04
Browser (if applicable)
Arc
Confirmation
README.md.Expected Behavior
No logging of backend config to browser console.
Actual Behavior
The backend config is being logged to the browser console, exposing sensitive configuration data that should not be visible to users. The following code in the frontend is causing the issue:
Setting
GLOBAL_LOG_LEVELtoWARNINGorCRITICALdoes not affect frontend logging behavior.Steps to Reproduce
Logs & Screenshots
Security Concern
This exposes potentially sensitive configuration details to anyone who opens the browser console, which presents a security risk.
@tjbck commented on GitHub (May 19, 2025):
Intended behaviour and is not a security concern.