csrf

Records14

1. closed8.6
   Open WebUI CVE-2026-109286: Open WebUI cross-origin vulnerability allows session token theft

   Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109286

   AI
2. closed4.6
   Open WebUI CVE-2026-45317: CSRF Vulnerability in Open WebUI Image Uploads

   Patch now · Disclosed · since 15 May 2026 · CVE-2026-45317

   AI
3. closed4.3
   ComfyUI + custom nodes CVE-2026-6589: CSRF vulnerability in ComfyUI server

   Patch now · Disclosed · since 20 Apr 2026 · CVE-2026-6589

   AI
4. closed6.5
   ComfyUI + custom nodes CVE-2024-10481: ComfyUI Cross-Site Request Forgery vulnerability

   Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-10481

   AI
5. closed8.0
   Open WebUI CVE-2024-7806: Open WebUI Cross-Site Request Forgery Vulnerability

   Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-7806

   AI
6. closed6.9
   Open WebUI CVE-2024-7035: Open WebUI vulnerable to Cross-Site Request Forgery

   Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-7035

   AI
7. closed4.4
   LoLLMs CVE-2024-6673: CSRF vulnerability in LoLLMS WebUI ComfyUI installation endpoint

   Patch now · Disclosed · since 29 Oct 2024 · CVE-2024-6673

   AI
8. closed4.4
   LoLLMs CVE-2024-6040: Missing client_id parameter leads to CSRF in lollms-webui

   Patch now · Disclosed · since 1 Aug 2024 · CVE-2024-6040

   AI
9. closed7.6
   LoLLMs CVE-2024-4499: CORS-related CSRF vulnerability in lollms XTTS server

   Patch now · Disclosed · since 24 Jun 2024 · CVE-2024-4499

   AI
10. closed4.4
    LoLLMs CVE-2024-4839: CSRF vulnerability in lollms-webui server configurations function

    Patch now · Disclosed · since 24 Jun 2024 · CVE-2024-4839

    AI
11. closed8.3
    LoLLMs CVE-2024-2288: CSRF and XSS Vulnerability in Lollms Web UI

    Patch now · Disclosed · since 6 Jun 2024 · CVE-2024-2288

    AI
12. closed7.4
    LoLLMs CVE-2024-2299: Lollms-webui stored Cross-Site Scripting vulnerability

    Patch now · Disclosed · since 14 May 2024 · CVE-2024-2299

    AI
13. closed6.5
    LocalAI CVE-2024-3135: LocalAI Cross-Site Request Forgery Vulnerability

    Patch now · Disclosed · since 1 Apr 2024 · CVE-2024-3135

    AI
14. closed8.8
    LoLLMs CVE-2024-1522: Lollms-webui CSRF Remote Code Execution

    Patch now · Disclosed · since 30 Mar 2024 · CVE-2024-1522

    AI