open-webui
0 live · 97 on record · last incident 33 days ago
Records97
- closed7.1Open WebUI CVE-2026-109293: Open WebUI Tool Source Code Information Disclosure
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109293
AI - closed8.5Open WebUI CVE-2026-109291: Open WebUI Cross-Site Scripting via Citation URLs
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109291
AI - closed7.1Open WebUI CVE-2026-109299: Open WebUI Denial of Service via Recurrence Rules
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109299
AI - closed7.1Open WebUI CVE-2026-109295: Open WebUI Regular Expression Denial of Service Vulnerability
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109295
AI - closed8.4Open WebUI CVE-2026-109290: Open WebUI Stored XSS Vulnerability in DocxPreview
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109290
AI - closed7.1Open WebUI CVE-2026-109298: Open WebUI vulnerable to regex denial of service in search tools
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109298
AI - closed5.0Open WebUI CVE-2026-109285: Open WebUI former collaborators retain knowledge base file access
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109285
AI - closed6.3Open WebUI CVE-2026-109289: Open WebUI allows deactivated users to maintain terminal access
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109289
AI - closed8.6Open WebUI CVE-2026-109286: Open WebUI cross-origin vulnerability allows session token theft
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109286
AI - closed7.1Open WebUI CVE-2026-109294: Open WebUI vulnerable to memory exhaustion via crafted image URLs
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109294
AI - closed7.1Open WebUI CVE-2026-109297: Denial of service in Open WebUI recurrence rule validator
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109297
AI - closed6.5Open WebUI CVE-2026-88005: Open WebUI OAuth email domain allowlist bypass vulnerability
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-88005
AI - closed6.5Open WebUI CVE-2026-88006: Open WebUI OAuth role management bypass vulnerability
Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-88006
AI - closed7.1Open WebUI CVE-2026-87999: Open WebUI server-side request fetch bypass to internal endpoints
Patch now · Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87999
AI - closed4.3Open WebUI CVE-2026-87997: Open WebUI chat injection into unauthorized user folders
Patch now · Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87997
AI - closed6.5Open WebUI CVE-2026-87014: Open WebUI role demotion session caching authorization flaw
Patch now · Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87014
AI - closed4.3Open WebUI CVE-2026-87012: Open WebUI instance-wide calendar alert suppression vulnerability
Patch now · Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87012
AI - closed7.1Open WebUI CVE-2026-87998: Open WebUI unauthorized knowledge connection deletion
Patch now · Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87998
AI - closed7.7Open WebUI CVE-2026-87996: Open WebUI SSRF via DNS Rebinding in Playwright Loader
Patch now · Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87996
AI - closed4.3Open WebUI CVE-2026-87994: Open WebUI Channel Message Overwrite Vulnerability
Patch now · Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87994
AI - closed6.8Open WebUI CVE-2026-87015: Open WebUI Session Cookie Leak to Tool Servers
Patch now · Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87015
AI - closed4.3Open WebUI CVE-2026-87013: Open WebUI Folder Loop Denial of Service Vulnerability
Patch now · Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87013
AI - closed6.3Open WebUI CVE-2026-54020: Open WebUI vulnerable to DNS rebinding during URL validation
Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-54020
AI - closed7.1Open WebUI CVE-2026-70485: Open WebUI vulnerable to SSRF through NAT64 IPv6 encoding
Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70485
AI - closed8.1Open WebUI CVE-2026-70482: Open WebUI insecure OAuth token exchange vulnerability
Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70482
AI - closed6.5Open WebUI CVE-2026-70493: Open WebUI vulnerable to regular expression denial of service
Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70493
AI - closed6.5Open WebUI CVE-2026-70491: Open WebUI leaks full Python tool source to non-admin users
Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70491
AI - closed6.0Open WebUI Open WebUI channel members endpoint exposes sensitive credentials
Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59222
AI - closed3.1Open WebUI Open WebUI thread ID binding flaw discloses private channel messages
Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59215
AI - closed5.4Open WebUI CVE-2026-59212: Open WebUI model meta.knowledge file access escalation
Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59212
AI - closed7.3Open WebUI CVE-2026-59214: Open WebUI stored web worker XSS via Pyodide
Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59214
AI - closed7.7Open WebUI CVE-2026-59216: Open WebUI cross-user code-interpreter and tool execution
Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59216
AI - closed4.3Open WebUI CVE-2026-59227: Open WebUI image-edit authorization bypass
Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59227
AI - closed4.3Open WebUI CVE-2026-59223: Open WebUI WEB_FETCH_FILTER_LIST host filter bypass
Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59223
AI - closed3.5Open WebUI CVE-2026-59213: Open WebUI cross-user model-list exposure via static cache key
Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59213
AI - closed7.1Open WebUI CVE-2026-59219: Open WebUI realtime endpoints accept Redis-revoked JWTs
Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59219
AI - closed5.4Open WebUI CVE-2026-59225: Open WebUI Arena task endpoints bypass model access controls
Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59225
AI - closed5.3Open WebUI CVE-2026-59218: Open WebUI Account Enumeration via Timing Side-Channel
Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59218
AI - closed3.1Open WebUI CVE-2026-59226: Open WebUI Scheduled Automations Lifecycle Flaw
Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59226
AI - closed8.0Open WebUI CVE-2026-59224: Open WebUI Terminal Proxy User Identity Spoofing
Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59224
AI - closed5.3Open WebUI CVE-2026-56399: Open WebUI contains a server-side request forgery vulnerability in retrieval endpoint
Patch now · Disclosed · since 30 Jun 2026 · CVE-2026-56399
AI - closed4.3Open WebUI CVE-2026-54016: Open WebUI knowledge base file enumeration BOLA
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54016
AI - closed5.3Open WebUI CVE-2026-54022: Open WebUI authentication bypass leaks private notes
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54022
AI - closed7.1Open WebUI CVE-2026-54007: Open WebUI Cross-origin postMessage confirmation bypass
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54007
AI - closed8.5Open WebUI CVE-2026-54008: Open WebUI Redirect-Bypass SSRF in OAuth Processing
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54008
AI - closed8.7Open WebUI CVE-2026-54011: Open WebUI Stored XSS in Mermaid Markdown Preview
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54011
AI - closed6.5Open WebUI CVE-2026-54009: Open WebUI Cross-User File Disclosure Vulnerability
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54009
AI - closed7.7Open WebUI CVE-2026-54018: Open WebUI SSRF Protection Bypass via HTTP Redirects
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54018
AI - closed7.7Open WebUI CVE-2026-54017: Open WebUI terminal server proxy path traversal and SSRF
Patch now · Disclosed · since 17 Jun 2026 · updated 18 Jun 2026 · CVE-2026-54017
AI - closed4.3Open WebUI CVE-2026-54014: Open WebUI sibling-prefix path traversal in cache endpoint
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54014
AI - closed4.3Open WebUI CVE-2026-54006: Open WebUI calendar event re-parenting IDOR vulnerability
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54006
AI - closed8.3Open WebUI CVE-2026-54010: Open WebUI forged chat-file link leads to file read and deletion
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54010
AI - closed7.6Open WebUI CVE-2026-54013: Open WebUI Stored XSS via Model Profile Images
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54013
AI - closed7.1Open WebUI CVE-2026-54012: Open WebUI forged model meta.knowledge enables cross-user file access
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54012
AI - closed6.4Open WebUI CVE-2026-54015: Open WebUI prompt history IDOR allows cross-prompt read and deletion
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54015
AI - closed6.5Open WebUI CVE-2026-54019: Open WebUI RAG ACL bypass in Milvus multitenancy mode
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54019
AI - closed6.3Open WebUI CVE-2026-54021: Open WebUI proxy bypass routes calls to arbitrary Ollama backends
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54021
AI - closed8.5Open WebUI CVE-2026-45400: Open WebUI SSRF Bypass in validate_url
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45400
AI - closed6.5Open WebUI CVE-2026-45351: Open WebUI System Prompt Exposure to Non-Admin Users
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45351
AI - closed8.1Open WebUI CVE-2026-45675: Open WebUI LDAP and OAuth Admin Race Condition
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45675
AI - closedOpen WebUI Open WebUI vulnerable to stored XSS via OAuth picture claim
Patch now · Disclosed · since 14 May 2026
AI - closed7.1Open WebUI CVE-2026-45349: Open WebUI broken access control for completions API
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45349
AI - closed4.3Open WebUI CVE-2026-45385: Open WebUI IDOR vulnerability in update_message_by_id endpoint
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45385
AI - closed5.4Open WebUI CVE-2026-45396: Open WebUI Mass Assignment User ID Spoofing
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45396
AI - closed5.3Open WebUI CVE-2026-45397: Open WebUI Unauthenticated RAG Config Disclosure
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45397
AI - closed7.5Open WebUI CVE-2026-45398: Open WebUI Retrieval API Access Control Bypass
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45398
AI - closed8.1Open WebUI CVE-2026-45402: Open WebUI Cross-User File Access Vulnerability
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45402
AI - closed6.5Open WebUI CVE-2026-45666: Open WebUI IDOR Vulnerability in User Notes
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45666
AI - closed8.3Open WebUI CVE-2026-44570: Open WebUI Inconsistent Authorization in Memories API
Patch now · Disclosed · since 11 May 2026 · updated 15 May 2026 · CVE-2026-44570
AI - closed6.5Open WebUI CVE-2026-44571: Open WebUI Improper Authorization in Standard Channels
Patch now · Disclosed · since 11 May 2026 · updated 15 May 2026 · CVE-2026-44571
AI - closed7.1Open WebUI CVE-2026-44569: Open WebUI insecure message access and authorization flaw
Patch now · Disclosed · since 11 May 2026 · updated 15 May 2026 · CVE-2026-44569
AI - closedOpen WebUI Open WebUI CORS misconfiguration and session validation issue
Patch now · Disclosed · since 11 May 2026
AI - closed8.1Open WebUI CVE-2026-44565: Open WebUI Arbitrary File Write, Delete via Path Traversal
Patch now · Disclosed · since 11 May 2026 · updated 15 May 2026 · CVE-2026-44565
AI - closed4.3Open WebUI CVE-2026-44557: Open WebUI vulnerable to Global Knowledge Base Enumeration
Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44557
AI - closed7.3Open WebUI CVE-2026-44567: Open WebUI Improper Authorization Control Vulnerability
Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44567
AI - closed8.1Open WebUI CVE-2026-44554: Open WebUI Vulnerable to RAG Poisoning via Collection Overwrite
Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44554
AI - closed5.4Open WebUI CVE-2026-44564: Read-Only Open WebUI Users Can Modify Collaborative Docs
Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44564
AI - closed7.3Open WebUI CVE-2026-44721: Open WebUI Vulnerable to Stored XSS via Model Description
Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44721
AI - closed5.4Open WebUI CVE-2026-44561: Open WebUI Deactivated Channel Members Retain Access
Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44561
AI - closed5.4Open WebUI CVE-2026-29070: Open WebUI unauthorized deletion of knowledge files
Patch now · Disclosed · since 27 Mar 2026 · CVE-2026-29070
AI - closed4.3Open WebUI CVE-2026-28786: Open WebUI vulnerable to path traversal in audio endpoint
Patch now · Disclosed · since 27 Mar 2026 · CVE-2026-28786
AI - closed3.1Open WebUI CVE-2026-29071: Open WebUI IDOR allows access to other users' memories
Patch now · Disclosed · since 27 Mar 2026 · CVE-2026-29071
AI - closed7.1Open WebUI CVE-2026-28788: Open WebUI File Overwrite Vulnerability
Patch now · Disclosed · since 27 Mar 2026 · CVE-2026-28788
AI - closed7.4Open WebUI CVE-2025-46719: Open WebUI vulnerable to stored XSS in chat transcripts
Patch now · Disclosed · since 7 Jul 2026 · updated 7 Jul 2026 · CVE-2025-46719
AI - closed4.3Open WebUI CVE-2024-7046: Open WebUI Access Control Flaw Exposes Admin Details
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-7046
AI - closed7.5Open WebUI CVE-2024-7983: Open WebUI Denial of Service via Markdown Endpoint
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-7983
AI - closed6.8Open WebUI CVE-2024-7044: Open WebUI stored cross-site scripting via file upload
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-7044
AI - closed8.4Open WebUI CVE-2024-7990: Open WebUI stored cross-site scripting vulnerability
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-7990
AI - closedOpen WebUI Open WebUI Multipart Boundary Denial of Service
Patch now · Disclosed · since 20 Mar 2025
AI - closed8.0Open WebUI CVE-2024-7806: Open WebUI Cross-Site Request Forgery Vulnerability
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-7806
AI - closed7.5Open WebUI CVE-2024-7036: Open WebUI Uncontrolled Resource Consumption
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-7036
AI - closed8.1Open WebUI CVE-2024-7043: Open WebUI Arbitrary File Access and Deletion Vulnerability
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-7043
AI - closed7.5Open WebUI CVE-2024-12537: Open WebUI Uncontrolled Resource Consumption vulnerability
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-12537
AI - closed7.5Open WebUI CVE-2024-8053: Open WebUI Lacks Authentication for PDF Endpoint
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-8053
AI - closed6.5Open WebUI CVE-2024-7037: open-webui allows writing and deleting arbitrary files
Patch now · Disclosed · since 9 Oct 2024 · CVE-2024-7037
AI - closed6.5Open WebUI CVE-2024-7041: open-webui IDOR vulnerability allows editing memories
Patch now · Disclosed · since 9 Oct 2024 · CVE-2024-7041
AI - closed6.1Open WebUI CVE-2024-6706: Open WebUI Stored Cross-Site Scripting
Patch now · Disclosed · since 8 Aug 2024 · CVE-2024-6706
AI