diff --git a/var/spack/repos/builtin/packages/root/package.py b/var/spack/repos/builtin/packages/root/package.py
index 6a6484b4b2..8504c6f894 100644
--- a/var/spack/repos/builtin/packages/root/package.py
+++ b/var/spack/repos/builtin/packages/root/package.py
@@ -105,6 +105,8 @@ class Root(CMakePackage):
         when="@6.26:6.26.06 +root7 ^nlohmann-json@3.11:",
     )
 
+    patch("webgui.patch", level=0, when="@6.26.00:6.26.10,6.28.00:6.28.08 +webgui")
+
     if sys.platform == "darwin":
         # Resolve non-standard use of uint, _cf_
         # https://sft.its.cern.ch/jira/browse/ROOT-7886.
diff --git a/var/spack/repos/builtin/packages/root/webgui.patch b/var/spack/repos/builtin/packages/root/webgui.patch
new file mode 100644
index 0000000000..b97dea6ef3
--- /dev/null
+++ b/var/spack/repos/builtin/packages/root/webgui.patch
@@ -0,0 +1,25 @@
+--- config/rootrc.in_ORIG	2023-11-28 08:32:42.696061390 +0100
++++ config/rootrc.in	2023-11-28 08:32:47.672727920 +0100
+@@ -217,7 +217,7 @@
+ # Type of tree viewer: TTreeViewer or RTreeViewer
+ TreeViewer.Name:             TTreeViewer
+ # Type of Browser: TRootBrowser or TRootBrowserLite
+-Browser.Name:                @root_browser_class@
++Browser.Name:                TRootBrowser
+ # Browser Options (plugins)
+ # F: File browser E: Text Editor H: HTML browser
+ # C: Canvas I: I/O redirection P: Proof G: GL viewer
+
+--- config/rootrc.in_ORIG	2023-11-28 08:18:11.686085190 +0100
++++ config/rootrc.in	2023-11-28 08:18:15.839418409 +0100
+@@ -247,8 +247,8 @@
+ WebGui.HttpPortMax:         9800
+ # Exact IP iddress to bind bind http server (default - empty)
+ WebGui.HttpBind:
+-# Use only loopback address to bind http server (default - no)
+-WebGui.HttpLoopback:        no
++# Use only loopback address to bind http server (default - yes)
++WebGui.HttpLoopback:        yes
+ # Use https protocol for the http server (default - no)
+ WebGui.UseHttps:            no
+ WebGui.ServerCert:          rootserver.pem