Skip to contentOpen-webui vulnerabilities
Newest
- openwebui open webui, open-webui +1 moreOpen WebUI: IDOR - Retrieval API Bypasses Knowledge Base Access ControlsCVE-2026-45398Fix available7.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Unauthenticated RAG Configuration DisclosureCVE-2026-45397Fix available5.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data ManipulationCVE-2026-45396Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Missing `workspace.tools` Authorization Check on Tool Update Endpoint Allows Privilege Escalation to Code ExecutionCVE-2026-45395Fix available7.2 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt leakage)CVE-2026-45387Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: An IDOR vulnerability exists in the pin_channel_message API endpointCVE-2026-45386Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: An IDOR vulnerability exists in the update_message_by_id API endpointCVE-2026-45385Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Authenticated users can bypass model access control via exposed query parameterCVE-2026-45365Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Exposure of System Prompt to Regular User [Non-Admin]CVE-2026-45351Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Chat completion API allows tool restrictions to be bypassedCVE-2026-45350Fix available7.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Broken Access Control for Completions APICVE-2026-45349Fix available7.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Blind server side request forgery (SSRF) via the PDF generate functionCVE-2026-45347Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored Cross-Site Scripting in SVG RendererCVE-2026-45346Fix available5.1 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Missing authorization check at the model update function - models from other users can be updatedCVE-2026-45345Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: API key endpoint restrictions bypassed via `x-api-key` header — full message processing on restricted endpointsCVE-2026-45339Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)CVE-2026-45338Fix available7.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Full SSRF Vulnerability in the RAG Web Search FeatureCVE-2026-45331Fix available8.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Cross-Site Request Forgery (CSRF) via Image URL ManipulationCVE-2026-45317Fix available4.6 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html} without DOMPurify)CVE-2026-45318Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access)CVE-2026-45316Public exploitFix available3.5 Low
- openwebui open webui, open-webui +1 moreOpen WebUI: XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/imageCVE-2026-45314Fix available7.4 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptionsCVE-2026-45315Fix available8.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored XSS via the HTML renedering viewCVE-2026-45303Fix available7.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Missing permission check in files API allows authenticated users to list, access and delete every uploaded fileCVE-2026-45301Fix available8.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored Cross-Site Scripting In Profile PictureCVE-2026-45299Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Inconsistent authorization controls within memories APICVE-2026-44570Fix available8.3 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Improper Authorization in Standard Channels Allows Message Updates with Read PermissionCVE-2026-44571Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Insecure Message Access Breaks AuthorizationCVE-2026-44569Fix available7.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Open WebUI Arbitrary File Write, Delete via Path TraversalCVE-2026-44565Fix available8.1 High
- open-webui, openwebui open webui +1 moreopen-webui - Remote Code Execution via CORS Misconfiguration and Session ValidationCVE-2026-56400Fix available9.0 Critical
- openwebui open webui, open-webui +1 moreOpen WebUI: Arbitrary File Upload and Path TraversalCVE-2026-44566Fix available7.3 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Open WebUI Improper Authorization ControlCVE-2026-44567Fix available7.3 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored XSS in excel file previewCVE-2026-44549Fix available7.3 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored XSS in Pending User Overlay via Incorrect DOMPurify Application OrderCVE-2026-44568Fix available4.8 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Unauthorized File and Knowledge Base Content Access via RAG Vector SearchCVE-2026-44560Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Deactivated Channel Members Retain Full Access to Group/DM ChannelsCVE-2026-44561Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Read-Only Users Can Modify Collaborative Documents via Socket.IOCVE-2026-44564Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings, and /api/showCVE-2026-44563Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Model Import Overwrites Any Model Without Ownership CheckCVE-2026-44562Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Missing Access Check on Channel Members Endpoint for Standard ChannelsCVE-2026-44559Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Global Knowledge Base Enumeration via knowledge-bases Meta-CollectionCVE-2026-44557Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection OverwriteCVE-2026-44554Fix available8.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Channel Access Grants Bypass filter_allowed_access_grantsCVE-2026-44558Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: responses passthrough endpoint lacks access control authorizationCVE-2026-44556Fix available7.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Base Model Routing Bypasses Access Control via Model ChainingCVE-2026-44555Fix available7.6 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache PoisoningCVE-2026-44552Fix available8.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note AccessCVE-2026-44553Fix available8.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' AccountsCVE-2026-44550Fix available5.0 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: LDAP Empty Password Authentication BypassCVE-2026-44551Fix available9.1 Critical
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored XSS via Model DescriptionCVE-2026-44721Fix available7.3 High
- Show moreLoading…