CVE-2024-7035
Cross-Site Request Forgery (CSRF) in open-webui/open-webui
In version v0.3.8 of open-webui/open-webui, sensitive actions such as deleting and resetting are performed using the GET method. This vulnerability allows an attacker to perform Cross-Site Request Forgery (CSRF) attacks, where an unaware user can unintentionally perform sensitive actions by simply visiting a malicious site or through top-level navigation. The affected endpoints include /rag/api/v1/reset, /rag/api/v1/reset/db, /api/v1/memories/reset, and /rag/api/v1/reset/uploads. This impacts both the availability and integrity of the application.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Cross-Site Request Forgery (CSRF) in open-webui/open-webui
In version v0.3.8 of open-webui/open-webui, sensitive actions such as deleting and resetting are performed using the GET method. This vulnerability allows an attacker to perform Cross-Site Request Forgery (CSRF) attacks, where an unaware user can unintentionally perform sensitive actions by simply visiting a malicious site or through top-level navigation. The affected endpoints include /rag/api/v1/reset, /rag/api/v1/reset/db, /api/v1/memories/reset, and /rag/api/v1/reset/uploads. This impacts both the availability and integrity of the application.
- Record
CVE-2024-7035- CVSS 3.0
- 6.9 Medium
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:L - Weakness
- CWE-352
- Updated
- 2026-11-02
EUVDEUVD-2025-6943
In version v0.3.8 of open-webui/open-webui, sensitive actions such as deleting and resetting are performed using the GET method. This vulnerability allows an attacker to perform Cross-Site Request Forgery (CSRF) attacks, where an unaware user can unintentionally perform sensitive actions by simply visiting a malicious site or through top-level navigation. The affected endpoints include /rag/api/v1/reset, /rag/api/v1/reset/db, /api/v1/memories/reset, and /rag/api/v1/reset/uploads. This impacts both the availability and integrity of the application.
- Record
EUVD-2025-6943- CVSS 3.0
- 6.9 Medium
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-p5vx-9hj8-cf4h
Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF)
In version v0.3.8 of open-webui/open-webui, sensitive actions such as deleting and resetting are performed using the GET method. This vulnerability allows an attacker to perform Cross-Site Request Forgery (CSRF) attacks, where an unaware user can unintentionally perform sensitive actions by simply visiting a malicious site or through top-level navigation. The affected endpoints include /rag/api/v1/reset, /rag/api/v1/reset/db, /api/v1/memories/reset, and /rag/api/v1/reset/uploads. This impacts both the availability and integrity of the application.
- Record
GHSA-p5vx-9hj8-cf4h- CVSS 3.0
- 6.9 Medium
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:L - Weakness
- CWE-352
- Updated
- 2026-11-02
NVD
In version v0.3.8 of open-webui/open-webui, sensitive actions such as deleting and resetting are performed using the GET method. This vulnerability allows an attacker to perform Cross-Site Request Forgery (CSRF) attacks, where an unaware user can unintentionally perform sensitive actions by simply visiting a malicious site or through top-level navigation. The affected endpoints include /rag/api/v1/reset, /rag/api/v1/reset/db, /api/v1/memories/reset, and /rag/api/v1/reset/uploads. This impacts both the availability and integrity of the application.
- Record
CVE-2024-7035- CVSS 3.0
- 6.9 Medium
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:L - Weakness
- CWE-352
- Updated
- 2026-11-02
OSV
Cross-Site Request Forgery (CSRF) in open-webui/open-webui
In version v0.3.8 of open-webui/open-webui, sensitive actions such as deleting and resetting are performed using the GET method. This vulnerability allows an attacker to perform Cross-Site Request Forgery (CSRF) attacks, where an unaware user can unintentionally perform sensitive actions by simply visiting a malicious site or through top-level navigation. The affected endpoints include /rag/api/v1/reset, /rag/api/v1/reset/db, /api/v1/memories/reset, and /rag/api/v1/reset/uploads. This impacts both the availability and integrity of the application.
- Record
CVE-2024-7035- CVSS 3.0
- 6.9 Medium
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:L - Weakness
- CWE-352
- Updated
- 2026-11-02
OSVGHSA-p5vx-9hj8-cf4h
Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF)
In version v0.3.8 of open-webui/open-webui, sensitive actions such as deleting and resetting are performed using the GET method. This vulnerability allows an attacker to perform Cross-Site Request Forgery (CSRF) attacks, where an unaware user can unintentionally perform sensitive actions by simply visiting a malicious site or through top-level navigation. The affected endpoints include /rag/api/v1/reset, /rag/api/v1/reset/db, /api/v1/memories/reset, and /rag/api/v1/reset/uploads. This impacts both the availability and integrity of the application.
- Record
GHSA-p5vx-9hj8-cf4h- CVSS 3.0
- 6.9 Medium
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:L - Weakness
- CWE-352
- Updated
- 2026-11-02
OSVPYSEC-2026-1739
Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF)
In version v0.3.8 of open-webui/open-webui, sensitive actions such as deleting and resetting are performed using the GET method. This vulnerability allows an attacker to perform Cross-Site Request Forgery (CSRF) attacks, where an unaware user can unintentionally perform sensitive actions by simply visiting a malicious site or through top-level navigation. The affected endpoints include /rag/api/v1/reset, /rag/api/v1/reset/db, /api/v1/memories/reset, and /rag/api/v1/reset/uploads. This impacts both the availability and integrity of the application.
- Record
PYSEC-2026-1739- CVSS 3.0
- 6.9 Medium
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:L - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
open-webuiPyPI |
through 0.3.8 | None known |
open-webuiPyPI |
through 0.3.8, plus listed versions 0.1.1240.1.1250.2.00.2.10.2.2 Show 11 moreShow less0.2.30.2.40.2.50.3.00.3.10.3.20.3.30.3.40.3.50.3.60.3.7 |
None known |
open-webuiPyPI |
before 0.3.16, plus listed versions 0.1.1240.1.1250.2.00.2.10.2.2 Show 18 moreShow less0.2.30.2.40.2.50.3.00.3.10.3.100.3.120.3.130.3.140.3.150.3.20.3.30.3.40.3.50.3.60.3.70.3.80.3.9 |
0.3.16 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-7035 is a medium vulnerability (CVSS 6.9) in Open-webui Open-webui/open-webui, published March 20, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.67%, the 95th percentile. Fixed in open-webui 0.3.16.