Open WebUI
Filed as: open-webui
Newest record 2026-10-12 · 181 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Exploited or KEV-listed · 0
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
No record for Open WebUI has confirmed exploitation or a KEV flag.
Disclosures by month · last 24 months
Disclosed CVEs, no confirmed exploitation · 186
- closed7.2Open WebUI CVE-2026-109288: Open WebUI stored XSS vulnerability allows JWT theft
Disclosed · since 12 Oct 2026 · CVE-2026-109288
AI - closed7.1Open WebUI CVE-2026-109293: Open WebUI Tool Source Code Information Disclosure
Disclosed · since 12 Oct 2026 · CVE-2026-109293
AI - closed8.5Open WebUI CVE-2026-109291: Open WebUI Cross-Site Scripting via Citation URLs
Disclosed · since 12 Oct 2026 · CVE-2026-109291
AI - closed7.1Open WebUI CVE-2026-109299: Open WebUI Denial of Service via Recurrence Rules
Disclosed · since 12 Oct 2026 · CVE-2026-109299
AI - closed7.1Open WebUI CVE-2026-109295: Open WebUI Regular Expression Denial of Service Vulnerability
Disclosed · since 12 Oct 2026 · CVE-2026-109295
AI - closed8.4Open WebUI CVE-2026-109290: Open WebUI Stored XSS Vulnerability in DocxPreview
Disclosed · since 12 Oct 2026 · CVE-2026-109290
AI - closed7.1Open WebUI CVE-2026-109298: Open WebUI vulnerable to regex denial of service in search tools
Disclosed · since 12 Oct 2026 · CVE-2026-109298
AI - closed5.0Open WebUI CVE-2026-109285: Open WebUI former collaborators retain knowledge base file access
Disclosed · since 12 Oct 2026 · CVE-2026-109285
AI - closed6.3Open WebUI CVE-2026-109289: Open WebUI allows deactivated users to maintain terminal access
Disclosed · since 12 Oct 2026 · CVE-2026-109289
AI - closed8.6Open WebUI CVE-2026-109286: Open WebUI cross-origin vulnerability allows session token theft
Disclosed · since 12 Oct 2026 · CVE-2026-109286
AI - closed7.1Open WebUI CVE-2026-109294: Open WebUI vulnerable to memory exhaustion via crafted image URLs
Disclosed · since 12 Oct 2026 · CVE-2026-109294
AI - closed5.3Open WebUI CVE-2026-109296: Open WebUI missing authorization exposes disabled model backends
Disclosed · since 12 Oct 2026 · CVE-2026-109296
AI - closed7.6Open WebUI CVE-2026-109572: Open WebUI terminal proxy privilege escalation vulnerability
Disclosed · since 12 Oct 2026 · CVE-2026-109572
AI - closed7.6Open WebUI CVE-2026-109292: Open WebUI information disclosure leaks session cookies to OAuth servers
Disclosed · since 12 Oct 2026 · CVE-2026-109292
AI - closed5.3Open WebUI CVE-2026-109284: Open WebUI chat fork handler improper authorization flaw
Disclosed · since 12 Oct 2026 · CVE-2026-109284
AI - closed5.3Open WebUI CVE-2026-109287: Open WebUI knowledge base authorization flaw exposes folder metadata
Disclosed · since 12 Oct 2026 · CVE-2026-109287
AI - closed5.1Open WebUI CVE-2026-109300: Stored XSS in Open WebUI Markdown renderer
Disclosed · since 12 Oct 2026 · CVE-2026-109300
AI - closed7.1Open WebUI CVE-2026-109297: Denial of service in Open WebUI recurrence rule validator
Disclosed · since 12 Oct 2026 · CVE-2026-109297
AI - closed5.4Open WebUI CVE-2026-109283: Authorization bypass in Open WebUI OAuth token exchange
Disclosed · since 12 Oct 2026 · CVE-2026-109283
AI - closed6.5Open WebUI CVE-2026-88005: Open WebUI OAuth email domain allowlist bypass vulnerability
Disclosed · since 10 Sep 2026 · CVE-2026-88005
AI - closed6.5Open WebUI CVE-2026-88006: Open WebUI OAuth role management bypass vulnerability
Disclosed · since 10 Sep 2026 · CVE-2026-88006
AI - closed8.1Open WebUI CVE-2026-87016: Open WebUI OAuth Account Takeover via SQLite Wildcards
Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87016
AI - closed8.7Open WebUI CVE-2026-87995: Open WebUI XSS via terminal port-preview iframe sandbox misconfiguration
Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87995
AI - closed7.5Open WebUI CVE-2026-87011: Open WebUI unauthenticated OIDC logout server stall vulnerability
Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87011
AI - closed4.3Open WebUI CVE-2026-87017: Open WebUI exposes inaccessible knowledge bases via vector search
Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87017
AI - closed7.1Open WebUI CVE-2026-87999: Open WebUI server-side request fetch bypass to internal endpoints
Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87999
AI - closed4.3Open WebUI CVE-2026-87997: Open WebUI chat injection into unauthorized user folders
Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87997
AI - closed6.5Open WebUI CVE-2026-87014: Open WebUI role demotion session caching authorization flaw
Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87014
AI - closed4.3Open WebUI CVE-2026-87012: Open WebUI instance-wide calendar alert suppression vulnerability
Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87012
AI - closed7.1Open WebUI CVE-2026-87998: Open WebUI unauthorized knowledge connection deletion
Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87998
AI - closed7.7Open WebUI CVE-2026-87996: Open WebUI SSRF via DNS Rebinding in Playwright Loader
Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87996
AI - closed4.3Open WebUI CVE-2026-87994: Open WebUI Channel Message Overwrite Vulnerability
Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87994
AI - closed6.8Open WebUI CVE-2026-87015: Open WebUI Session Cookie Leak to Tool Servers
Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87015
AI - closed4.3Open WebUI CVE-2026-87013: Open WebUI Folder Loop Denial of Service Vulnerability
Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87013
AI - closed5.0Open WebUI Open WebUI SSRF vulnerability via unvalidated HTTP redirect targets
Disclosed · since 9 Sep 2026 · CVE-2026-88001
AI - closed6.5Open WebUI Open WebUI server hang via cyclic chat message history
Disclosed · since 9 Sep 2026 · CVE-2026-88002
AI - closed6.5Open WebUI Open WebUI server hang vulnerability via cyclic chat message deletion
Disclosed · since 9 Sep 2026 · CVE-2026-88000
AI - closed7.7Open WebUI Open WebUI SSRF Vulnerability CVE-2026-70479 via Playwright
Disclosed · since 4 Aug 2026 · CVE-2026-70479
AI - closed3.1Open WebUI Open WebUI Vulnerability CVE-2026-70483 Enables Chat Task Abortions
Disclosed · since 4 Aug 2026 · CVE-2026-70483
AI - closed4.1Open WebUI Open WebUI Vulnerability CVE-2026-70480 Allows Outbound Requests
Disclosed · since 4 Aug 2026 · CVE-2026-70480
AI - closed8.7Open WebUI CVE-2026-70492: Open WebUI stored XSS vulnerability in math block rendering
Disclosed · since 4 Aug 2026 · CVE-2026-70492
AI - closed5.3Open WebUI CVE-2026-70487: Open WebUI unauthorized knowledge file access vulnerability
Disclosed · since 4 Aug 2026 · CVE-2026-70487
AI - closed5.4Open WebUI CVE-2026-70481: Open WebUI authorization flaw in standard channel messages
Disclosed · since 4 Aug 2026 · CVE-2026-70481
AI - closed4.3Open WebUI CVE-2026-70484: Open WebUI permission check bypass in legacy chat completions
Disclosed · since 4 Aug 2026 · CVE-2026-70484
AI - closed6.3Open WebUI CVE-2026-70490: Open WebUI role gate bypass in terminal WebSocket route
Disclosed · since 4 Aug 2026 · CVE-2026-70490
AI - closed6.3Open WebUI CVE-2026-54020: Open WebUI vulnerable to DNS rebinding during URL validation
Disclosed · since 4 Aug 2026 · CVE-2026-54020
AI - closed7.1Open WebUI CVE-2026-70485: Open WebUI vulnerable to SSRF through NAT64 IPv6 encoding
Disclosed · since 4 Aug 2026 · CVE-2026-70485
AI - closed8.1Open WebUI CVE-2026-70482: Open WebUI insecure OAuth token exchange vulnerability
Disclosed · since 4 Aug 2026 · CVE-2026-70482
AI - closed6.5Open WebUI CVE-2026-70493: Open WebUI vulnerable to regular expression denial of service
Disclosed · since 4 Aug 2026 · CVE-2026-70493
AI - closed6.5Open WebUI CVE-2026-70491: Open WebUI leaks full Python tool source to non-admin users
Disclosed · since 4 Aug 2026 · CVE-2026-70491
AI - closed6.5Open WebUI CVE-2026-70489: Open WebUI automation recurrence parsing denial of service vulnerability
Disclosed · since 4 Aug 2026 · CVE-2026-70489
AI - closed4.3Open WebUI CVE-2026-70488: Open WebUI knowledge base sync cleanup access control vulnerability
Disclosed · since 4 Aug 2026 · CVE-2026-70488
AI - closed8.1Open WebUI CVE-2026-70494: Open WebUI folder deletion authorization bypass vulnerability
Disclosed · since 4 Aug 2026 · CVE-2026-70494
AI - closed8.2Open WebUI CVE-2026-70486: Open WebUI file-preview iframe vulnerability leads to account takeover
Disclosed · since 4 Aug 2026 · CVE-2026-70486
AI - closed7.1Open WebUI CVE-2026-59714: Open WebUI arbitrary message overwrite vulnerability
Disclosed · since 13 Aug 2026 · updated 13 Aug 2026 · CVE-2026-59714
AI - closed8.5Open WebUI CVE-2026-56398: Stored XSS vulnerability in Open WebUI OAuth flow
Disclosed · since 15 Jul 2026 · CVE-2026-56398
AI - closed6.0Open WebUI Open WebUI channel members endpoint exposes sensitive credentials
Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59222
AI - closed3.1Open WebUI Open WebUI thread ID binding flaw discloses private channel messages
Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59215
AI - closed6.5Open WebUI CVE-2026-59220: Open WebUI ReDoS in skill-mention regexes causes DoS
Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59220
AI - closed3.1Open WebUI CVE-2026-59715: Open WebUI unauthenticated WebSocket document access
Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59715
AI - closed7.7Open WebUI CVE-2026-59221: Open WebUI terminal proxy path traversal guard bypass
Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59221
AI - closed4.3Open WebUI CVE-2026-59217: Open WebUI knowledge-base write-access bypass
Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59217
AI - closed5.4Open WebUI CVE-2026-59212: Open WebUI model meta.knowledge file access escalation
Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59212
AI - closed7.3Open WebUI CVE-2026-59214: Open WebUI stored web worker XSS via Pyodide
Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59214
AI - closed7.7Open WebUI CVE-2026-59216: Open WebUI cross-user code-interpreter and tool execution
Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59216
AI - closed4.3Open WebUI CVE-2026-59227: Open WebUI image-edit authorization bypass
Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59227
AI - closed4.3Open WebUI CVE-2026-59223: Open WebUI WEB_FETCH_FILTER_LIST host filter bypass
Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59223
AI - closed3.5Open WebUI CVE-2026-59213: Open WebUI cross-user model-list exposure via static cache key
Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59213
AI - closed7.1Open WebUI CVE-2026-59219: Open WebUI realtime endpoints accept Redis-revoked JWTs
Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59219
AI - closed5.4Open WebUI CVE-2026-59225: Open WebUI Arena task endpoints bypass model access controls
Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59225
AI - closed5.3Open WebUI CVE-2026-59218: Open WebUI Account Enumeration via Timing Side-Channel
Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59218
AI - closed3.1Open WebUI CVE-2026-59226: Open WebUI Scheduled Automations Lifecycle Flaw
Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59226
AI - closed8.0Open WebUI CVE-2026-59224: Open WebUI Terminal Proxy User Identity Spoofing
Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59224
AI - closed5.3Open WebUI CVE-2026-56399: Open WebUI contains a server-side request forgery vulnerability in retrieval endpoint
Disclosed · since 30 Jun 2026 · CVE-2026-56399
AI - closed4.3Open WebUI CVE-2026-54016: Open WebUI knowledge base file enumeration BOLA
Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54016
AI - closed5.3Open WebUI CVE-2026-54022: Open WebUI authentication bypass leaks private notes
Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54022
AI - closed7.1Open WebUI CVE-2026-54007: Open WebUI Cross-origin postMessage confirmation bypass
Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54007
AI - closed8.5Open WebUI CVE-2026-54008: Open WebUI Redirect-Bypass SSRF in OAuth Processing
Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54008
AI - closed8.7Open WebUI CVE-2026-54011: Open WebUI Stored XSS in Mermaid Markdown Preview
Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54011
AI - closed6.5Open WebUI CVE-2026-54009: Open WebUI Cross-User File Disclosure Vulnerability
Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54009
AI - closed7.7Open WebUI CVE-2026-54018: Open WebUI SSRF Protection Bypass via HTTP Redirects
Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54018
AI - closed7.7Open WebUI CVE-2026-54017: Open WebUI terminal server proxy path traversal and SSRF
Disclosed · since 17 Jun 2026 · updated 18 Jun 2026 · CVE-2026-54017
AI - closed4.3Open WebUI CVE-2026-54014: Open WebUI sibling-prefix path traversal in cache endpoint
Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54014
AI - closed4.3Open WebUI CVE-2026-54006: Open WebUI calendar event re-parenting IDOR vulnerability
Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54006
AI - closed8.3Open WebUI CVE-2026-54010: Open WebUI forged chat-file link leads to file read and deletion
Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54010
AI - closed7.6Open WebUI CVE-2026-54013: Open WebUI Stored XSS via Model Profile Images
Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54013
AI - closed7.1Open WebUI CVE-2026-54012: Open WebUI forged model meta.knowledge enables cross-user file access
Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54012
AI - closed6.4Open WebUI CVE-2026-54015: Open WebUI prompt history IDOR allows cross-prompt read and deletion
Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54015
AI - closed6.5Open WebUI CVE-2026-54019: Open WebUI RAG ACL bypass in Milvus multitenancy mode
Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54019
AI - closed6.3Open WebUI CVE-2026-54021: Open WebUI proxy bypass routes calls to arbitrary Ollama backends
Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54021
AI - closed5.1Open WebUI CVE-2026-45346: Cross-Site Scripting in Open WebUI SVG Renderer
Disclosed · since 15 May 2026 · CVE-2026-45346
AI - closed8.1Open WebUI CVE-2026-45665: Stored XSS in Open WebUI Banner Component
Disclosed · since 15 May 2026 · CVE-2026-45665
AI - closed7.2Open WebUI CVE-2026-45395: Permission Bypass in Open WebUI Tool Update Endpoint
Disclosed · since 15 May 2026 · CVE-2026-45395
AI - closed4.6Open WebUI CVE-2026-45317: CSRF Vulnerability in Open WebUI Image Uploads
Disclosed · since 15 May 2026 · CVE-2026-45317
AI - closed6.5Open WebUI CVE-2026-45339: API Key Restriction Bypass in Open WebUI
Disclosed · Patched · since 15 May 2026 · updated 15 May 2026 · CVE-2026-45339
AI - closed8.5Open WebUI CVE-2026-45400: Open WebUI SSRF Bypass in validate_url
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45400
AI - closed6.5Open WebUI CVE-2026-45351: Open WebUI System Prompt Exposure to Non-Admin Users
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45351
AI - closed8.1Open WebUI CVE-2026-45675: Open WebUI LDAP and OAuth Admin Race Condition
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45675
AI - closed5.4Open WebUI CVE-2026-45318: Open WebUI Stored XSS via Unsanitized Office Preview Rendering
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45318
AI - closed4.3Open WebUI CVE-2026-45386: Open WebUI IDOR Vulnerability in Message Pinning API
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45386
AI - closed4.3Open WebUI CVE-2026-45387: Open WebUI System Prompt Exposure via Shared Model Permissions
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45387
AI - closed6.5Open WebUI CVE-2026-45345: Open WebUI Authorization Bypass Vulnerability in Model Updates
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45345
AI - closed8.5Open WebUI CVE-2026-45331: Open WebUI SSRF Bypass in RAG Web Search Feature
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45331
AI - closed7.7Open WebUI CVE-2026-45338: Open WebUI Vulnerable to SSRF via OAuth Profile Picture
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45338
AI - closed8.0Open WebUI CVE-2026-45671: Open WebUI shared-chat file deletion flaw
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45671
AI - closed3.5Open WebUI CVE-2026-45316: Open WebUI incorrect permission check for notes
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45316
AI - closed7.7Open WebUI CVE-2026-45303: Open WebUI stored XSS in HTML rendering view
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45303
AI - closed8.5Open WebUI CVE-2026-45401: Open WebUI SSRF bypass via HTTP redirect
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45401
AI - closedOpen WebUI Open WebUI vulnerable to stored XSS via OAuth picture claim
Disclosed · since 14 May 2026
AI - closed7.1Open WebUI CVE-2026-45349: Open WebUI broken access control for completions API
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45349
AI - closed4.3Open WebUI CVE-2026-45385: Open WebUI IDOR vulnerability in update_message_by_id endpoint
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45385
AI - closed5.4Open WebUI CVE-2026-45299: Open WebUI stored cross-site scripting in profile picture
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45299
AI - closed7.4Open WebUI CVE-2026-45314: Open WebUI stored XSS via SVG webhook profile image
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45314
AI - closed4.3Open WebUI CVE-2026-45347: Open WebUI blind SSRF vulnerability in PDF export
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45347
AI - closed5.4Open WebUI CVE-2026-45365: Open WebUI model access control bypass vulnerability
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45365
AI - closed6.5Open WebUI CVE-2026-45667: Open WebUI unauthenticated embedding generation DoS vulnerability
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45667
AI - closed8.7Open WebUI CVE-2026-45315: Open WebUI stored XSS via audio transcription uploads
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45315
AI - closed7.1Open WebUI CVE-2026-45399: Open WebUI background task disruption vulnerability
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45399
AI - closed5.4Open WebUI CVE-2026-45396: Open WebUI Mass Assignment User ID Spoofing
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45396
AI - closed5.3Open WebUI CVE-2026-45397: Open WebUI Unauthenticated RAG Config Disclosure
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45397
AI - closed7.5Open WebUI CVE-2026-45398: Open WebUI Retrieval API Access Control Bypass
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45398
AI - closed8.1Open WebUI CVE-2026-45402: Open WebUI Cross-User File Access Vulnerability
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45402
AI - closed6.5Open WebUI CVE-2026-45666: Open WebUI IDOR Vulnerability in User Notes
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45666
AI - closed8.1Open WebUI Open WebUI Missing Permission Check in Files API
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45301
AI - closed7.1Open WebUI CVE-2026-45350: Open WebUI chat completion API tool restriction bypass
Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45350
AI - closed8.3Open WebUI CVE-2026-44570: Open WebUI Inconsistent Authorization in Memories API
Disclosed · since 11 May 2026 · updated 15 May 2026 · CVE-2026-44570
AI - closed6.5Open WebUI CVE-2026-44571: Open WebUI Improper Authorization in Standard Channels
Disclosed · since 11 May 2026 · updated 15 May 2026 · CVE-2026-44571
AI - closed7.1Open WebUI CVE-2026-44569: Open WebUI insecure message access and authorization flaw
Disclosed · since 11 May 2026 · updated 15 May 2026 · CVE-2026-44569
AI - closedOpen WebUI Open WebUI CORS misconfiguration and session validation issue
Disclosed · since 11 May 2026
AI - closed8.1Open WebUI CVE-2026-44565: Open WebUI Arbitrary File Write, Delete via Path Traversal
Disclosed · since 11 May 2026 · updated 15 May 2026 · CVE-2026-44565
AI - closed4.3Open WebUI CVE-2026-44557: Open WebUI vulnerable to Global Knowledge Base Enumeration
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44557
AI - closed5.0Open WebUI CVE-2026-44550: Open WebUI Mass Assignment Vulnerability in Folder Creation
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44550
AI - closed8.1Open WebUI CVE-2026-44553: Open WebUI Stale Admin Role in Socket.IO Session Pool
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44553
AI - closed7.6Open WebUI CVE-2026-44555: Open WebUI Base Model Routing Access Control Bypass
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44555
AI - closed5.4Open WebUI CVE-2026-44563: Open WebUI Ollama Model Access Control Bypass
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44563
AI - closed6.5Open WebUI CVE-2026-44560: Open WebUI Unauthorized File and Knowledge Base Access via RAG Vector Search
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44560
AI - closed7.3Open WebUI CVE-2026-44567: Open WebUI Improper Authorization Control Vulnerability
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44567
AI - closed8.1Open WebUI CVE-2026-44554: Open WebUI Vulnerable to RAG Poisoning via Collection Overwrite
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44554
AI - closed5.4Open WebUI CVE-2026-44564: Read-Only Open WebUI Users Can Modify Collaborative Docs
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44564
AI - closed7.3Open WebUI CVE-2026-44721: Open WebUI Vulnerable to Stored XSS via Model Description
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44721
AI - closed5.4Open WebUI CVE-2026-44561: Open WebUI Deactivated Channel Members Retain Access
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44561
AI - closed6.5Open WebUI CVE-2026-44562: Open WebUI Model Import Overwrites Models
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44562
AI - closed7.3Open WebUI CVE-2026-44549: Open WebUI stored XSS in Excel file preview
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44549
AI - closed4.8Open WebUI CVE-2026-44568: Open WebUI Stored XSS in Pending User Overlay
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44568
AI - closed9.1Open WebUI CVE-2026-44551: Open WebUI LDAP Empty Password Authentication Bypass
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44551
AI - closed4.3Open WebUI CVE-2026-44559: Open WebUI missing access check on channel members
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44559
AI - closed7.3Open WebUI CVE-2026-44566: Open WebUI arbitrary file upload and path traversal
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44566
AI - closed8.7Open WebUI CVE-2026-44552: Open WebUI missing instance prefix in Redis cache
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44552
AI - closed7.1Open WebUI CVE-2026-44556: Open WebUI responses endpoint lacks authorization
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44556
AI - closed5.4Open WebUI CVE-2026-44558: Open WebUI channel access control bypass
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44558
AI - closed4.3Open WebUI CVE-2026-34225: Open WebUI blind SSRF in image edit functionality
Disclosed · since 7 Jul 2026 · updated 7 Jul 2026 · CVE-2026-34225
AI - closed7.7Open WebUI CVE-2026-34222: Open WebUI Broken Access Control in Tool Valves
Disclosed · since 1 Apr 2026 · CVE-2026-34222
AI - closed5.4Open WebUI CVE-2026-29070: Open WebUI unauthorized deletion of knowledge files
Disclosed · since 27 Mar 2026 · CVE-2026-29070
AI - closed4.3Open WebUI CVE-2026-28786: Open WebUI vulnerable to path traversal in audio endpoint
Disclosed · since 27 Mar 2026 · CVE-2026-28786
AI - closed3.1Open WebUI CVE-2026-29071: Open WebUI IDOR allows access to other users' memories
Disclosed · since 27 Mar 2026 · CVE-2026-29071
AI - closed7.1Open WebUI CVE-2026-28788: Open WebUI File Overwrite Vulnerability
Disclosed · since 27 Mar 2026 · CVE-2026-28788
AI - closed7.3Open WebUI CVE-2026-26192: Open WebUI stored XSS via citation document metadata
Disclosed · since 7 Jul 2026 · updated 7 Jul 2026 · CVE-2026-26192
AI - closed7.3Open WebUI CVE-2026-26193: Open WebUI stored XSS via iFrame embed properties
Disclosed · since 7 Jul 2026 · updated 7 Jul 2026 · CVE-2026-26193
AI - closed8.7Open WebUI Open WebUI Stored XSS Vulnerability CVE-2025-65959
Disclosed · since 4 Dec 2025 · CVE-2025-65959
AI - closed2.1Open WebUI CVE-2025-63681: Open WebUI Incorrect Access Control Vulnerability
Disclosed · since 4 Dec 2025 · CVE-2025-63681
AI - closed8.5Open WebUI CVE-2025-65958: Open WebUI SSRF via Web Retrieval API
Disclosed · since 4 Dec 2025 · CVE-2025-65958
AI - closed8.7Open WebUI CVE-2025-64495: Open WebUI vulnerable to Stored DOM XSS via prompts
Disclosed · since 7 Nov 2025 · updated 8 Nov 2025 · CVE-2025-64495
AI - closed7.3Open WebUI CVE-2025-64496: Open WebUI code injection via SSE events
Disclosed · since 7 Nov 2025 · updated 8 Nov 2025 · CVE-2025-64496
AI - closed6.4Open WebUI CVE-2025-46571: Open WebUI stored XSS via uploaded HTML file
Disclosed · since 7 Jul 2026 · updated 7 Jul 2026 · CVE-2025-46571
AI - closed7.4Open WebUI CVE-2025-46719: Open WebUI vulnerable to stored XSS in chat transcripts
Disclosed · since 7 Jul 2026 · updated 7 Jul 2026 · CVE-2025-46719
AI - closed4.3Open WebUI CVE-2024-7046: Open WebUI Access Control Flaw Exposes Admin Details
Disclosed · since 20 Mar 2025 · CVE-2024-7046
AI - closed7.5Open WebUI CVE-2024-7983: Open WebUI Denial of Service via Markdown Endpoint
Disclosed · since 20 Mar 2025 · CVE-2024-7983
AI - closedOpen WebUI Open WebUI vulnerable to denial of service via starlette dependency
Disclosed · since 20 Mar 2025
AI - closed6.8Open WebUI CVE-2024-7044: Open WebUI stored cross-site scripting via file upload
Disclosed · since 20 Mar 2025 · CVE-2024-7044
AI - closed8.4Open WebUI CVE-2024-7990: Open WebUI stored cross-site scripting vulnerability
Disclosed · since 20 Mar 2025 · CVE-2024-7990
AI - closedOpen WebUI Open WebUI Multipart Boundary Denial of Service
Disclosed · since 20 Mar 2025
AI - closed8.0Open WebUI CVE-2024-7806: Open WebUI Cross-Site Request Forgery Vulnerability
Disclosed · since 20 Mar 2025 · CVE-2024-7806
AI - closed7.5Open WebUI CVE-2024-7036: Open WebUI Uncontrolled Resource Consumption
Disclosed · since 20 Mar 2025 · CVE-2024-7036
AI - closed8.1Open WebUI Open WebUI Remote Code Execution via Audio Transcription API
Disclosed · since 20 Mar 2025 · CVE-2024-8060
AI - closed4.3Open WebUI Open WebUI Improper Access Control Leads to Arbitrary Prompt Read
Disclosed · since 20 Mar 2025 · CVE-2024-7045
AI - closed8.1Open WebUI CVE-2024-7043: Open WebUI Arbitrary File Access and Deletion Vulnerability
Disclosed · since 20 Mar 2025 · CVE-2024-7043
AI - closed7.5Open WebUI CVE-2024-12537: Open WebUI Uncontrolled Resource Consumption vulnerability
Disclosed · since 20 Mar 2025 · CVE-2024-12537
AI - closed7.5Open WebUI CVE-2024-8053: Open WebUI Lacks Authentication for PDF Endpoint
Disclosed · since 20 Mar 2025 · CVE-2024-8053
AI - closed7.6Open WebUI CVE-2024-7053: Open WebUI session fixation vulnerability
Disclosed · since 20 Mar 2025 · CVE-2024-7053
AI - closedOpen WebUI Open WebUI unauthenticated DoS vulnerability
Disclosed · since 20 Mar 2025
AI - closed7.5Open WebUI CVE-2024-12534: Open WebUI Uncontrolled Resource Consumption Vulnerability
Disclosed · since 20 Mar 2025 · CVE-2024-12534
AI - closed6.9Open WebUI CVE-2024-7035: Open WebUI vulnerable to Cross-Site Request Forgery
Disclosed · since 20 Mar 2025 · CVE-2024-7035
AI - closed6.5Open WebUI CVE-2024-7037: open-webui allows writing and deleting arbitrary files
Disclosed · since 9 Oct 2024 · CVE-2024-7037
AI - closed6.5Open WebUI CVE-2024-7041: open-webui IDOR vulnerability allows editing memories
Disclosed · since 9 Oct 2024 · CVE-2024-7041
AI - closed6.1Open WebUI CVE-2024-6706: Open WebUI Stored Cross-Site Scripting
Disclosed · since 8 Aug 2024 · CVE-2024-6706
AI - closed6.4Open WebUI CVE-2024-30256: Open WebUI authenticated blind SSRF vulnerability
Disclosed · since 16 Apr 2024 · CVE-2024-30256
AI
Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.