CVE Tools
Track your stack

Openwebui

136 CVEs tracked since 2024. Since Oct 2024, none of them reached CISA KEV.

Openwebui CVEs per month

Oct 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Openwebui CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2024-1050
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-03190
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-05590
2026-06160
2026-07190
2026-088 or fewer
2026-09180
2026-1011 or fewer
2026-110

Products

The products that kept showing up in Openwebui's monthly top three, with their CVEs summed over those months.

  1. Open Webui1366 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Openwebui.

  1. CVE-2026-88006Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange6.5
  2. CVE-2026-88005Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange6.5
  3. CVE-2026-88002Open WebUI: Any authenticated user can hang the server via a cyclic chat message history6.5
  4. CVE-2026-88001Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets5.0
  5. CVE-2026-88000Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree6.5
  6. CVE-2026-87999Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch7.1
  7. CVE-2026-87998Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion7.1
  8. CVE-2026-87997Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions4.3
  9. CVE-2026-87996Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader7.7
  10. CVE-2026-87995Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin8.7
  11. CVE-2026-87994Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint4.3
  12. CVE-2026-87017Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends4.3
  13. CVE-2026-87016Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite8.1
  14. CVE-2026-87015Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication6.8
  15. CVE-2026-87014Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes6.5

The record

Peak rank
#14 in May 2026
Busiest month shown
May 2026, 59 CVEs
Months with a KEV entry
0 since Oct 2024
Monthly snapshots
6 since 2024
Openwebui's full record, month by month