Skip to contentOpenwebui Open Webui vulnerabilities
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptionsCVE-2026-45315Fix available8.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored XSS via the HTML renedering viewCVE-2026-45303Fix available7.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Missing permission check in files API allows authenticated users to list, access and delete every uploaded fileCVE-2026-45301Fix available8.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored Cross-Site Scripting In Profile PictureCVE-2026-45299Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Inconsistent authorization controls within memories APICVE-2026-44570Fix available8.3 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Improper Authorization in Standard Channels Allows Message Updates with Read PermissionCVE-2026-44571Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Insecure Message Access Breaks AuthorizationCVE-2026-44569Fix available7.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Open WebUI Arbitrary File Write, Delete via Path TraversalCVE-2026-44565Fix available8.1 High
- open-webui, openwebui open webui +1 moreopen-webui - Remote Code Execution via CORS Misconfiguration and Session ValidationCVE-2026-56400Fix available9.0 Critical
- openwebui open webui, open-webui +1 moreOpen WebUI: Arbitrary File Upload and Path TraversalCVE-2026-44566Fix available7.3 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Open WebUI Improper Authorization ControlCVE-2026-44567Fix available7.3 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored XSS in excel file previewCVE-2026-44549Fix available7.3 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored XSS in Pending User Overlay via Incorrect DOMPurify Application OrderCVE-2026-44568Fix available4.8 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Unauthorized File and Knowledge Base Content Access via RAG Vector SearchCVE-2026-44560Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Deactivated Channel Members Retain Full Access to Group/DM ChannelsCVE-2026-44561Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Read-Only Users Can Modify Collaborative Documents via Socket.IOCVE-2026-44564Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings, and /api/showCVE-2026-44563Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Model Import Overwrites Any Model Without Ownership CheckCVE-2026-44562Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Missing Access Check on Channel Members Endpoint for Standard ChannelsCVE-2026-44559Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Global Knowledge Base Enumeration via knowledge-bases Meta-CollectionCVE-2026-44557Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection OverwriteCVE-2026-44554Fix available8.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Channel Access Grants Bypass filter_allowed_access_grantsCVE-2026-44558Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: responses passthrough endpoint lacks access control authorizationCVE-2026-44556Fix available7.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Base Model Routing Bypasses Access Control via Model ChainingCVE-2026-44555Fix available7.6 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache PoisoningCVE-2026-44552Fix available8.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note AccessCVE-2026-44553Fix available8.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' AccountsCVE-2026-44550Fix available5.0 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: LDAP Empty Password Authentication BypassCVE-2026-44551Fix available9.1 Critical
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored XSS via Model DescriptionCVE-2026-44721Fix available7.3 High
- openwebui open webui, open-webui +1 moreOpen WebUI has Blind Server Side Request Forgery in its Image Edit FunctionalityCVE-2026-342254.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI has Broken Access Control in Tool ValvesCVE-2026-34222Fix available7.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI's Insecure Direct Object Reference (IDOR) allows access to other users' memoriesCVE-2026-29071Fix available3.1 Low
- openwebui open webui, open-webui +1 moreOpen WebUI has unauthorized deletion of knowledge filesCVE-2026-29070Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI's process_files_batch() endpoint missing ownership check, allows unauthorized file overwriteCVE-2026-28788Fix available7.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI vulnerable to Path Traversal in `POST /api/v1/audio/transcriptions`CVE-2026-28786Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI vulnerable to Stored XSS via iFrame embeds in response messagesCVE-2026-26193Fix available7.3 High
- openwebui open webui, open-webui +1 moreOpen WebUI vulnerable to Stored XSS via iFrame in citations modelCVE-2026-26192Fix available7.3 High
- open-webui, openwebui open webui +1 moreOpen WebUI vulnerable to Stored DOM XSS via Note 'Download PDF'CVE-2025-65959Fix available8.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI vulnerable to Server-Side Request Forgery (SSRF) via Arbitrary URL Processing in /api/v1/retrieval/process/webCVE-2025-65958Fix available8.5 High
- openwebui open webuiopen-webui is Vulnerable to Incorrect Access ControlCVE-2025-63681Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE EventsCVE-2025-64496Fix available7.3 High
- openwebui open webui, open-webui +1 moreOpen WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCECVE-2025-64495Public exploitFix available8.7 High
- open-webui, openwebui open webui +1 moreOpen WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functionsCVE-2025-46719Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI vulnerable to limited stored XSS vila uploaded html fileCVE-2025-46571Fix available5.3 Medium
- open-webui open-webui/open-webui, openwebui open webui +1 moreCross-site Scripting (XSS) in open-webui/open-webuiCVE-2024-80179.0 Critical
- open-webui open-webui/open-webui, openwebui open webui +1 moreImproper Authentication in open-webui/open-webuiCVE-2024-8053Fix available7.5 High
- open-webui open-webui/open-webui, openwebui open webui +1 moreImproper Access Control in open-webui/open-webuiCVE-2024-7043Fix available8.1 High
- open-webui open-webui/open-webui, openwebui open webui +1 moreStored XSS in open-webui/open-webuiCVE-2024-7044Fix available6.8 Medium
- open-webui open-webui/open-webui, openwebui open webui +1 moreCross-Site Request Forgery (CSRF) in open-webui/open-webuiCVE-2024-7035Fix available6.9 Medium
- open-webui, open-webui open-webui/open-webui, openwebui open webui +2 moreIDOR in open-webui/open-webuiCVE-2024-70486.3 Medium
- Show moreLoading…