Skip to contentOpen-webui vulnerabilities
Newest
- openwebui open webui, open-webui +1 moreOpen WebUI: Account takeover via OAuth token exchange accepting tokens issued to any clientCVE-2026-70482Fix available8.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Any member with write access to a standard channel can edit or delete other members' messagesCVE-2026-70481Public exploitFix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Client-side SSRF via unrestricted external resource loading in Vega/Vega-Lite chart renderingCVE-2026-70480Fix available4.1 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loaderCVE-2026-70479Fix available7.7 High
- open-webuiOpen WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel message_ids)CVE-2026-59714Fix available7.1 High
- open-webui, openwebui open webui +1 moreopen-webui terminal proxy path traversal guard bypass via 9x encoded traversalCVE-2026-59221Fix available7.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Arena task endpoints can bypass underlying model access controlsCVE-2026-59225Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id header and ws_terminal session_id query injection)CVE-2026-59224Fix available8.0 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Model meta.knowledge read-only file access can be upgraded to file write/deleteCVE-2026-59212Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matchingCVE-2026-59223Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentialsCVE-2026-59222Fix available6.0 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Private channel messages can be disclosed through cross-channel thread parent_id bindingCVE-2026-59215Fix available3.1 Low
- openwebui open webui, open-webui +1 moreOpen WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)CVE-2026-59213Fix available3.5 Low
- openwebui open webui, open-webui +1 moreOpen WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can add files to KB)CVE-2026-59217Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_idCVE-2026-59216Fix available7.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logoutCVE-2026-59219Fix available7.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave)CVE-2026-59715Fix available3.1 Low
- openwebui open webui, open-webui +1 moreOpen WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default configCVE-2026-59220Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocationCVE-2026-59226Fix available3.1 Low
- openwebui open webui, open-webui +1 moreOpen WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permissionCVE-2026-59227Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Account enumeration via observable login timing discrepancyCVE-2026-59218Fix available5.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored web worker XSS via PyodideCVE-2026-59214Fix available7.3 High
- open-webuiOpen WebUI - Server-Side Request Forgery via Location Redirect in /api/v1/retrieval/process/webCVE-2026-563995.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Any authenticated user can read other users' private notes via Socket.IOCVE-2026-54022Fix available5.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Authenticated users can target arbitrary configured Ollama backends via unguarded url_idx path parameterCVE-2026-54021Fix available6.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: RAG ACL Bypass in Milvus Multitenancy ModeCVE-2026-54019Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP RedirectsCVE-2026-54018Fix available7.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversalCVE-2026-54017Public exploitFix available7.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Open WebUI BOLA: `search_knowledge_files` Allows Unauthorized Knowledge Base File EnumerationCVE-2026-54016Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Prompt history IDOR: unbound history_id allows cross-prompt read and deletionCVE-2026-54015Fix available6.4 Medium
- open-webui, openwebui open webui +1 moreOpen WebUI: Sibling-Prefix Path Traversal via /cache/{path} in open-webui/open-webuiCVE-2026-54014Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored XSS to Account Takeover via Model Profile Images in Open WebUICVE-2026-54013Fix available7.6 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Forged model meta.knowledge allows cross-user file read and deletionCVE-2026-54012Fix available7.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored XSS in Mermaid Markdown PreviewCVE-2026-54011Fix available8.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Forged chat-file link allows cross-user file read and deletionCVE-2026-54010Fix available8.3 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Cross-user file disclosure via /api/chat/completions image_url fieldCVE-2026-54009Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url`CVE-2026-54008Fix available8.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Cross-origin postMessage confirmation bypass via action:submitCVE-2026-54007Fix available7.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Calendar event re-parenting allows writing events into another user's calendarCVE-2026-54006Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin AccountsCVE-2026-45675Fix available8.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassedCVE-2026-45672Fix available8.8 High
- openwebui open webui, open-webui +1 moreOpen WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletionCVE-2026-45671Fix available8.0 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)CVE-2026-45667Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Indirect Object Reference (IDOR) in user notesCVE-2026-45666Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored XSS in Banner Component via Improper Sanitization OrderCVE-2026-45665Fix available8.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach EndpointsCVE-2026-45402Fix available8.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI - Stored Cross-Site Scripting via OAuth Picture Claim SVG Data URICVE-2026-56398Fix available8.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load EndpointsCVE-2026-45401Public exploitFix available8.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Server-Side Request Forgery (SSRF) bypass in `validate_url`CVE-2026-45400Fix available8.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Low-privilege authenticated users can enumerate and stop global background tasks, causing system-wide chat disruptionCVE-2026-45399Fix available7.1 High
- Show moreLoading…