Skip to contentOpen-webui vulnerabilities
Newest
- openwebui open webui, open-webui +1 moreOpen WebUI has Blind Server Side Request Forgery in its Image Edit FunctionalityCVE-2026-342254.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI has Broken Access Control in Tool ValvesCVE-2026-34222Fix available7.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI's Insecure Direct Object Reference (IDOR) allows access to other users' memoriesCVE-2026-29071Fix available3.1 Low
- openwebui open webui, open-webui +1 moreOpen WebUI has unauthorized deletion of knowledge filesCVE-2026-29070Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI's process_files_batch() endpoint missing ownership check, allows unauthorized file overwriteCVE-2026-28788Fix available7.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI vulnerable to Path Traversal in `POST /api/v1/audio/transcriptions`CVE-2026-28786Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI vulnerable to Stored XSS via iFrame embeds in response messagesCVE-2026-26193Fix available7.3 High
- openwebui open webui, open-webui +1 moreOpen WebUI vulnerable to Stored XSS via iFrame in citations modelCVE-2026-26192Fix available7.3 High
- open-webui, openwebui open webui +1 moreOpen WebUI vulnerable to Stored DOM XSS via Note 'Download PDF'CVE-2025-65959Fix available8.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI vulnerable to Server-Side Request Forgery (SSRF) via Arbitrary URL Processing in /api/v1/retrieval/process/webCVE-2025-65958Fix available8.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE EventsCVE-2025-64496Fix available7.3 High
- openwebui open webui, open-webui +1 moreOpen WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCECVE-2025-64495Public exploitFix available8.7 High
- open-webui, openwebui open webui +1 moreOpen WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functionsCVE-2025-46719Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI vulnerable to limited stored XSS vila uploaded html fileCVE-2025-46571Fix available5.3 Medium
- open-webui open-webui/open-webui, openwebui open webui +1 moreCross-site Scripting (XSS) in open-webui/open-webuiCVE-2024-80179.0 Critical
- open-webui open-webui/open-webui, openwebui open webui +1 moreImproper Authentication in open-webui/open-webuiCVE-2024-8053Fix available7.5 High
- open-webui open-webui/open-webui, openwebui open webui +1 moreImproper Access Control in open-webui/open-webuiCVE-2024-7043Fix available8.1 High
- open-webui open-webui/open-webui, openwebui open webui +1 moreStored XSS in open-webui/open-webuiCVE-2024-7044Fix available6.8 Medium
- open-webui open-webui/open-webui, openwebui open webui +1 moreCross-Site Request Forgery (CSRF) in open-webui/open-webuiCVE-2024-7035Fix available6.9 Medium
- open-webui, open-webui open-webui/open-webui, openwebui open webui +2 moreIDOR in open-webui/open-webuiCVE-2024-70486.3 Medium
- open-webui, open-webui open-webui/open-webui, openwebui open webui +2 moreIDOR in open-webui/open-webuiCVE-2024-7041Fix available6.5 Medium
- open-webui open-webui/open-webui, openwebui open webui +1 moreDenial of Service in open-webui/open-webuiCVE-2024-7983Fix available7.5 High
- open-webui, openwebui open webui +1 moreOpen WebUI vulnerable to server-side request forgery in utils.pyCVE-2024-302566.4 Medium