openwebui
AI / MLoss-project
Top products
Latest CVEs
The 15 most recently published vulnerabilities affecting openwebui.
- CVE-2026-56400open-webui - Remote Code Execution via CORS Misconfiguration and Session Validation8.3
- CVE-2026-56398Open WebUI - Stored Cross-Site Scripting via OAuth Picture Claim SVG Data URI7.3
- CVE-2026-59221open-webui terminal proxy path traversal guard bypass via 9x encoded traversal7.7
- CVE-2026-59225Open WebUI: Arena task endpoints can bypass underlying model access controls5.4
- CVE-2026-59224Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id header and ws_terminal session_id query injection)8.0
- CVE-2026-59212Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete5.4
- CVE-2026-59223Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching4.3
- CVE-2026-59222Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials6.5
- CVE-2026-59215Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding3.1
- CVE-2026-59213Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)3.5
- CVE-2026-59217Open WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can add files to KB)4.3
- CVE-2026-59216Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id7.7
- CVE-2026-59219Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout7.1
- CVE-2026-59715Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave)3.1
- CVE-2026-59220Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config6.5