VendorsOpen WebUIopen_webuiall versions

Vulnerabilities

Open WebUI Open Webui

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

160CVEs

CVE-2026-44566

Open WebUI: Arbitrary File Upload and Path Traversal

Published 2026-05-15 · Analyzed

9.8EPSS 0.003

CVE-2026-56400

open-webui - Remote Code Execution via CORS Misconfiguration and Session Validation

Published 2026-07-15 · Analyzed

9.6EPSS 0.005

CVE-2026-44551

Open WebUI: LDAP Empty Password Authentication Bypass

Published 2026-05-15 · Analyzed

9.1EPSS 0.015

CVE-2026-56398

Open WebUI - Stored Cross-Site Scripting via OAuth Picture Claim SVG Data URI

Published 2026-07-15 · Analyzed

9.0EPSS 0.006

CVE-2024-8017

Cross-site Scripting (XSS) in open-webui/open-webui

Published 2025-03-20 · Analyzed

9.0EPSS 0.006

CVE-2026-59216

Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id

Published 2026-07-09 · Analyzed

9.0EPSS 0.003

CVE-2026-59214

Open WebUI: Stored web worker XSS via Pyodide

Published 2026-07-09 · Analyzed

9.0EPSS 0.003

CVE-2024-7044

Stored XSS in open-webui/open-webui

Published 2025-03-20 · Analyzed

8.9EPSS 0.005

CVE-2024-6707

Open WebUI Arbitrary File Upload + Path Traversal

Published 2024-08-07 · Modified

8.8EPSS 0.010

CVE-2024-7043

Improper Access Control in open-webui/open-webui

Published 2025-03-20 · Modified

8.8EPSS 0.006

CVE-2026-70482

Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client

Published 2026-08-04 · Analyzed

8.8EPSS 0.005

CVE-2026-45672

Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed

Published 2026-05-15 · Analyzed

8.8EPSS 0.004

CVE-2025-64495

Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE

Published 2025-11-08 · Analyzed

8.7EPSS 0.005

CVE-2026-54011

Open WebUI: Stored XSS in Mermaid Markdown Preview

Published 2026-06-23 · Analyzed

8.7EPSS 0.003

CVE-2026-44549

Open WebUI: Stored XSS in excel file preview

Published 2026-05-15 · Analyzed

8.7EPSS 0.003

CVE-2026-44552

Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning

Published 2026-05-15 · Analyzed

8.7EPSS 0.003

CVE-2026-70492

Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages

Published 2026-08-04 · Analyzed

8.7EPSS 0.003

CVE-2025-65959

Open WebUI vulnerable to Stored DOM XSS via Note 'Download PDF'

Published 2025-12-04 · Analyzed

8.7EPSS 0.002

CVE-2026-87995

Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin

Published 2026-09-09 · Analyzed

8.7EPSS 0.002

CVE-2026-45315

Open WebUI: Stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptions

Published 2026-05-15 · Modified

8.7EPSS 0.002

CVE-2025-65958

Open WebUI vulnerable to Server-Side Request Forgery (SSRF) via Arbitrary URL Processing in /api/v1/retrieval/process/web

Published 2025-12-04 · Analyzed

8.5EPSS 0.044

CVE-2026-54008

Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url`

Published 2026-06-23 · Analyzed

8.5EPSS 0.003

CVE-2026-45401

Open WebUI: SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints

Published 2026-05-15 · Analyzed

8.5EPSS 0.003

CVE-2026-45400

Open WebUI: Server-Side Request Forgery (SSRF) bypass in `validate_url`

Published 2026-05-15 · Analyzed

8.5EPSS 0.003

CVE-2026-45331

Open WebUI: Full SSRF Vulnerability in the RAG Web Search Feature

Published 2026-05-15 · Analyzed

8.5EPSS 0.003

CVE-2026-54010

Open WebUI: Forged chat-file link allows cross-user file read and deletion

Published 2026-06-23 · Analyzed

8.3EPSS 0.004

CVE-2026-44570

Open WebUI: Inconsistent authorization controls within memories API

Published 2026-05-15 · Analyzed

8.3EPSS 0.003

CVE-2024-8053

Improper Authentication in open-webui/open-webui

Published 2025-03-20 · Modified

8.2EPSS 0.006

CVE-2026-70486

Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-origin

Published 2026-08-04 · Analyzed

8.2EPSS 0.003

CVE-2026-44565

Open WebUI: Open WebUI Arbitrary File Write, Delete via Path Traversal

Published 2026-05-15 · Analyzed

8.1EPSS 0.005

CVE-2026-45675

Open WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accounts

Published 2026-05-15 · Modified

8.1EPSS 0.004

CVE-2026-87016

Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite

Published 2026-09-09 · Analyzed

8.1EPSS 0.004

CVE-2026-45402

Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach Endpoints

Published 2026-05-15 · Analyzed

8.1EPSS 0.003

CVE-2026-45665

Open WebUI: Stored XSS in Banner Component via Improper Sanitization Order

Published 2026-05-15 · Analyzed

8.1EPSS 0.003

CVE-2026-70494

Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder

Published 2026-08-04 · Analyzed

8.1EPSS 0.003

CVE-2026-44554

Open WebUI: Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection Overwrite

Published 2026-05-15 · Analyzed

8.1EPSS 0.003

CVE-2026-44553

Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access

Published 2026-05-15 · Modified

8.1EPSS 0.003

CVE-2026-45301

Open WebUI: Missing permission check in files API allows authenticated users to list, access and delete every uploaded file

Published 2026-05-15 · Modified

8.1EPSS 0.003

CVE-2026-29070

Open WebUI has unauthorized deletion of knowledge files

Published 2026-03-26 · Analyzed

8.1EPSS 0.003

CVE-2025-64496

Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events

Published 2025-11-08 · Analyzed

8.0EPSS 0.078

Open WebUI Open Webui

Security check