Skip to contentOpenwebui Open Webui vulnerabilities
- openwebui open webui, open-webui +1 moreOpen WebUI: Account enumeration via observable login timing discrepancyCVE-2026-59218Fix available5.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored web worker XSS via PyodideCVE-2026-59214Fix available7.3 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Any authenticated user can read other users' private notes via Socket.IOCVE-2026-54022Fix available5.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Authenticated users can target arbitrary configured Ollama backends via unguarded url_idx path parameterCVE-2026-54021Fix available6.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: RAG ACL Bypass in Milvus Multitenancy ModeCVE-2026-54019Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP RedirectsCVE-2026-54018Fix available7.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversalCVE-2026-54017Public exploitFix available7.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Open WebUI BOLA: `search_knowledge_files` Allows Unauthorized Knowledge Base File EnumerationCVE-2026-54016Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Prompt history IDOR: unbound history_id allows cross-prompt read and deletionCVE-2026-54015Fix available6.4 Medium
- open-webui, openwebui open webui +1 moreOpen WebUI: Sibling-Prefix Path Traversal via /cache/{path} in open-webui/open-webuiCVE-2026-54014Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored XSS to Account Takeover via Model Profile Images in Open WebUICVE-2026-54013Fix available7.6 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Forged model meta.knowledge allows cross-user file read and deletionCVE-2026-54012Fix available7.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored XSS in Mermaid Markdown PreviewCVE-2026-54011Fix available8.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Forged chat-file link allows cross-user file read and deletionCVE-2026-54010Fix available8.3 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Cross-user file disclosure via /api/chat/completions image_url fieldCVE-2026-54009Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url`CVE-2026-54008Fix available8.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Cross-origin postMessage confirmation bypass via action:submitCVE-2026-54007Fix available7.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Calendar event re-parenting allows writing events into another user's calendarCVE-2026-54006Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin AccountsCVE-2026-45675Fix available8.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassedCVE-2026-45672Fix available8.8 High
- openwebui open webui, open-webui +1 moreOpen WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletionCVE-2026-45671Fix available8.0 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)CVE-2026-45667Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Indirect Object Reference (IDOR) in user notesCVE-2026-45666Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored XSS in Banner Component via Improper Sanitization OrderCVE-2026-45665Fix available8.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach EndpointsCVE-2026-45402Fix available8.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI - Stored Cross-Site Scripting via OAuth Picture Claim SVG Data URICVE-2026-56398Fix available8.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load EndpointsCVE-2026-45401Public exploitFix available8.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Server-Side Request Forgery (SSRF) bypass in `validate_url`CVE-2026-45400Fix available8.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Low-privilege authenticated users can enumerate and stop global background tasks, causing system-wide chat disruptionCVE-2026-45399Fix available7.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: IDOR - Retrieval API Bypasses Knowledge Base Access ControlsCVE-2026-45398Fix available7.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Unauthenticated RAG Configuration DisclosureCVE-2026-45397Fix available5.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data ManipulationCVE-2026-45396Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Missing `workspace.tools` Authorization Check on Tool Update Endpoint Allows Privilege Escalation to Code ExecutionCVE-2026-45395Fix available7.2 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt leakage)CVE-2026-45387Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: An IDOR vulnerability exists in the pin_channel_message API endpointCVE-2026-45386Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: An IDOR vulnerability exists in the update_message_by_id API endpointCVE-2026-45385Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Authenticated users can bypass model access control via exposed query parameterCVE-2026-45365Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Exposure of System Prompt to Regular User [Non-Admin]CVE-2026-45351Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Chat completion API allows tool restrictions to be bypassedCVE-2026-45350Fix available7.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Broken Access Control for Completions APICVE-2026-45349Fix available7.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Blind server side request forgery (SSRF) via the PDF generate functionCVE-2026-45347Fix available4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored Cross-Site Scripting in SVG RendererCVE-2026-45346Fix available5.1 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Missing authorization check at the model update function - models from other users can be updatedCVE-2026-45345Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: API key endpoint restrictions bypassed via `x-api-key` header — full message processing on restricted endpointsCVE-2026-45339Fix available6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)CVE-2026-45338Fix available7.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Full SSRF Vulnerability in the RAG Web Search FeatureCVE-2026-45331Fix available8.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Cross-Site Request Forgery (CSRF) via Image URL ManipulationCVE-2026-45317Fix available4.6 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html} without DOMPurify)CVE-2026-45318Fix available5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access)CVE-2026-45316Public exploitFix available3.5 Low
- openwebui open webui, open-webui +1 moreOpen WebUI: XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/imageCVE-2026-45314Fix available7.4 High
- Show moreLoading…