# Open WebUI v0.12.4 adds on-demand skill loading and says it contains unlisted security fixes

Canonical: https://theagenticweekly.com/news/open-webui-v0-12-4-skills-compaction-security · Evidence: Reported · First seen: 2026-10-26 03:48 UTC · Source published: 2026-10-25 08:07 UTC · Brief published: 2026-10-26 03:51 UTC · Updated: 2026-10-26 03:51 UTC · Author: Agentic Weekly

> Open WebUI v0.12.4 adds optional on-demand loading of skills and shows when chat context is compacted; its release notes say the release contains security fixes that are not itemised and recommend updating.

## What changed

- Security: the notes say the release contains security fixes that are not itemised in the changelog, recommend updating all deployments as soon as possible, and promise advisories after CVE assignment.
- Skills: a new admin option, "Load selected skills on demand" (`ENABLE_SKILL_LAZY_LOADING`), lists selected skills for the model to load when needed instead of sending their full instructions with every message. It is off by default and needs the built-in Skills tool.
- Context compaction now shows a "Context compacted" line where older messages were summarized, and also runs in temporary chats and in short chats that are already over the threshold.
- Administrators can hide individual controls from users under Admin Settings > Interface or with `UI_VISIBILITY`; administrators still see every control.
- Performance: folder changes, channel posts and the admin analytics dashboard are described as faster on busy instances, and tools from tool servers now reach the model in the same form after a restart so provider prompt caches keep working.

## In the source's words

> "We strongly recommend updating all deployments as soon as possible to have the latest security fixes in place."
> (Open WebUI v0.12.4 release notes, https://github.com/open-webui/open-webui/releases/tag/v0.12.4)

## Early verdict

Self-hosters should plan the update soon; the vendor itself recommends it. (Basis: Based only on the release notes' own security statement; the fixes and advisories were not available to read and we have not run the release.)

## What we have not verified

- We did not run this release or test any of the new options.
- The security fixes are not listed in the release notes, so we cannot say what they cover or how severe they are.
- Performance claims are the project's own wording; we did not measure them.

## Timeline

- Source published: 2026-10-25 08:07 UTC
- First seen by our watcher: 2026-10-26 03:48 UTC (via GitHub releases feed (watcher seed run)), 19.7 hours after the source's timestamp
- Brief published: 2026-10-26 03:51 UTC

## Sources

- [Open WebUI v0.12.4 release notes (GitHub)](https://github.com/open-webui/open-webui/releases/tag/v0.12.4) (primary source) (fetched 2026-10-26)

## Related

- [Open WebUI: verdict and setup guide](https://theagenticweekly.com/tools/open-webui)
- [Ollama vs Open WebUI](https://theagenticweekly.com/compare/ollama-vs-open-webui)
- [Alternatives to Open WebUI](https://theagenticweekly.com/alternatives/open-webui)
- [All news briefs](https://theagenticweekly.com/news)
- [This week's releases](https://theagenticweekly.com/this-week)
- [New AI models this week](https://theagenticweekly.com/models/this-week)

## How to cite

Agentic Weekly, "Open WebUI v0.12.4 adds on-demand skill loading and says it contains unlisted security fixes", published 2026-10-26 03:51 UTC, https://theagenticweekly.com/news/open-webui-v0-12-4-skills-compaction-security