open-webui vulnerabilities (PyPI)
161 vulnerabilities.
open-webuiPyPIOpen WebUI: Missing permission check in files API allows authenticated users to list, access and delete every uploaded file8.1 Highopen-webuiPyPIOpen WebUI: Stored Cross-Site Scripting In Profile Picture5.4 Mediumopen-webuiPyPIOpen WebUI: Inconsistent authorization controls within memories API8.3 Highopen-webuiPyPIOpen WebUI: Improper Authorization in Standard Channels Allows Message Updates with Read Permission6.5 Mediumopen-webuiPyPIOpen WebUI: Insecure Message Access Breaks Authorization7.1 Highopen-webuiPyPIOpen WebUI: Open WebUI Arbitrary File Write, Delete via Path Traversal8.1 Highopen-webuiPyPIopen-webui - Remote Code Execution via CORS Misconfiguration and Session Validation9.0 Criticalopen-webuiPyPIOpen WebUI: Arbitrary File Upload and Path Traversal7.3 Highopen-webuiPyPIOpen WebUI: Open WebUI Improper Authorization Control7.3 Highopen-webuiPyPIOpen WebUI: Stored XSS in excel file preview7.3 Highopen-webuiPyPIOpen WebUI: Stored XSS in Pending User Overlay via Incorrect DOMPurify Application Order4.8 Mediumopen-webuiPyPIOpen WebUI: Unauthorized File and Knowledge Base Content Access via RAG Vector Search6.5 Mediumopen-webuiPyPIOpen WebUI: Deactivated Channel Members Retain Full Access to Group/DM Channels5.4 Mediumopen-webuiPyPIOpen WebUI: Read-Only Users Can Modify Collaborative Documents via Socket.IO5.4 Mediumopen-webuiPyPIOpen WebUI: Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings, and /api/show5.4 Mediumopen-webuiPyPIOpen WebUI: Model Import Overwrites Any Model Without Ownership Check6.5 Mediumopen-webuiPyPIOpen WebUI: Missing Access Check on Channel Members Endpoint for Standard Channels4.3 Mediumopen-webuiPyPIOpen WebUI: Global Knowledge Base Enumeration via knowledge-bases Meta-Collection4.3 Mediumopen-webuiPyPIOpen WebUI: Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection Overwrite8.1 Highopen-webuiPyPIOpen WebUI: Channel Access Grants Bypass filter_allowed_access_grants5.4 Mediumopen-webuiPyPIOpen WebUI: responses passthrough endpoint lacks access control authorization7.1 Highopen-webuiPyPIOpen WebUI: Base Model Routing Bypasses Access Control via Model Chaining7.6 Highopen-webuiPyPIOpen WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning8.7 Highopen-webuiPyPIOpen WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access8.1 Highopen-webuiPyPIOpen WebUI: Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts5.0 Mediumopen-webuiPyPIOpen WebUI: LDAP Empty Password Authentication Bypass9.1 Criticalopen-webuiPyPIOpen WebUI: Stored XSS via Model Description7.3 Highopen-webuiPyPIOpen WebUI has Blind Server Side Request Forgery in its Image Edit Functionality4.3 Mediumopen-webuiPyPIOpen WebUI has Broken Access Control in Tool Valves7.7 Highopen-webuiPyPIOpen WebUI's Insecure Direct Object Reference (IDOR) allows access to other users' memories3.1 Lowopen-webuiPyPIOpen WebUI has unauthorized deletion of knowledge files5.4 Mediumopen-webuiPyPIOpen WebUI's process_files_batch() endpoint missing ownership check, allows unauthorized file overwrite7.1 Highopen-webuiPyPIOpen WebUI vulnerable to Path Traversal in `POST /api/v1/audio/transcriptions`4.3 Mediumopen-webuiPyPIOpen WebUI vulnerable to Stored XSS via iFrame embeds in response messages7.3 Highopen-webuiPyPIOpen WebUI vulnerable to Stored XSS via iFrame in citations model7.3 Highopen-webuiPyPIOpen WebUI vulnerable to Server-Side Request Forgery (SSRF) via Arbitrary URL Processing in /api/v1/retrieval/process/web8.5 Highopen-webuiPyPIopen-webui is Vulnerable to Incorrect Access Control4.3 Mediumopen-webuiPyPIOpen WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events7.3 Highopen-webuiPyPIOpen WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE8.7 Highopen-webuiPyPIOpen WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions5.4 Mediumopen-webuiPyPIOpen WebUI vulnerable to limited stored XSS vila uploaded html file5.3 Mediumopen-webuiPyPIOpen WebUI Vulnerable to a Session Fixation Attack7.6 Highopen-webuiPyPIImproper Authentication in open-webui/open-webui7.5 Highopen-webuiPyPIOpen WebUI Cross-Site Request Forgery (CSRF) Vulnerability8.0 Highopen-webuiPyPIOpen WebUI Uncontrolled Resource Consumption vulnerability7.5 Highopen-webuiPyPIImproper Access Control in open-webui/open-webui8.1 Highopen-webuiPyPIStored XSS in open-webui/open-webui6.8 Mediumopen-webuiPyPIOpen WebUI has vulnerable dependency on starlette via fastapi7.5 Highopen-webuiPyPIOpen WebUI Has Improper Access Control Leading to Arbitrary Prompt Read4.3 Mediumopen-webuiPyPICross-Site Request Forgery (CSRF) in open-webui/open-webui6.9 Medium- Show moreLoading…