VendorsOpen WebUIopen_webuiany version
Vulnerabilities

Open WebUI Open Webui any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

144CVEs
CVE-2026-34222
Open WebUI has Broken Access Control in Tool Valves
Published 2026-04-01 · Analyzed
7.7EPSS 0.005
CVE-2026-54018
Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects
Published 2026-06-23 · Analyzed
7.7EPSS 0.004
CVE-2026-45338
Open WebUI: SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)
Published 2026-05-15 · Analyzed
7.7EPSS 0.004
CVE-2026-87996
Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader
Published 2026-09-09 · Analyzed
7.7EPSS 0.004
CVE-2026-45303
Open WebUI: Stored XSS via the HTML renedering view
Published 2026-05-15 · Modified
7.7EPSS 0.003
CVE-2026-44555
Open WebUI: Base Model Routing Bypasses Access Control via Model Chaining
Published 2026-05-15 · Analyzed
7.6EPSS 0.003
CVE-2026-54013
Open WebUI: Stored XSS to Account Takeover via Model Profile Images in Open WebUI
Published 2026-06-23 · Modified
7.6EPSS 0.003
CVE-2026-87011
Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout
Published 2026-09-09 · Analyzed
7.5EPSS 0.006
CVE-2026-45398
Open WebUI: IDOR - Retrieval API Bypasses Knowledge Base Access Controls
Published 2026-05-15 · Analyzed
7.5EPSS 0.005
CVE-2026-45314
Open WebUI: XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/image
Published 2026-05-15 · Modified
7.4EPSS 0.002
CVE-2026-44721
Open WebUI: Stored XSS via Model Description
Published 2026-05-15 · Modified
7.3EPSS 0.004
CVE-2026-44567
Open WebUI: Open WebUI Improper Authorization Control
Published 2026-05-15 · Analyzed
7.3EPSS 0.003
CVE-2026-26192
Open WebUI vulnerable to Stored XSS via iFrame in citations model
Published 2026-02-19 · Analyzed
7.3EPSS 0.003
CVE-2026-26193
Open WebUI vulnerable to Stored XSS via iFrame embeds in response messages
Published 2026-02-19 · Analyzed
7.3EPSS 0.003
CVE-2026-45395
Open WebUI: Missing `workspace.tools` Authorization Check on Tool Update Endpoint Allows Privilege Escalation to Code Execution
Published 2026-05-15 · Analyzed
7.2EPSS 0.007
CVE-2026-87998
Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion
Published 2026-09-09 · Analyzed
7.1EPSS 0.005
CVE-2026-59219
Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout
Published 2026-07-09 · Analyzed
7.1EPSS 0.005
CVE-2026-45399
Open WebUI: Low-privilege authenticated users can enumerate and stop global background tasks, causing system-wide chat disruption
Published 2026-05-15 · Analyzed
7.1EPSS 0.004
CVE-2026-44569
Open WebUI: Insecure Message Access Breaks Authorization
Published 2026-05-15 · Analyzed
7.1EPSS 0.004
CVE-2026-28788
Open WebUI's process_files_batch() endpoint missing ownership check, allows unauthorized file overwrite
Published 2026-03-26 · Analyzed
7.1EPSS 0.004
CVE-2026-45350
Open WebUI: Chat completion API allows tool restrictions to be bypassed
Published 2026-05-15 · Analyzed
7.1EPSS 0.004
CVE-2026-44556
Open WebUI: responses passthrough endpoint lacks access control authorization
Published 2026-05-15 · Analyzed
7.1EPSS 0.004
CVE-2026-87999
Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch
Published 2026-09-09 · Analyzed
7.1EPSS 0.004
CVE-2026-70485
Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs
Published 2026-08-04 · Analyzed
7.1EPSS 0.004
CVE-2026-45349
Open WebUI: Broken Access Control for Completions API
Published 2026-05-15 · Modified
7.1EPSS 0.003
CVE-2026-54012
Open WebUI: Forged model meta.knowledge allows cross-user file read and deletion
Published 2026-06-23 · Analyzed
7.1EPSS 0.003
CVE-2026-54007
Open WebUI: Cross-origin postMessage confirmation bypass via action:submit
Published 2026-06-23 · Modified
7.1EPSS 0.002
CVE-2026-87015
Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication
Published 2026-09-09 · Analyzed
6.8EPSS 0.005
CVE-2026-88000
Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree
Published 2026-09-09 · Analyzed
6.5EPSS 0.006
CVE-2026-70493
Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrophically
Published 2026-08-04 · Analyzed
6.5EPSS 0.006
CVE-2026-88002
Open WebUI: Any authenticated user can hang the server via a cyclic chat message history
Published 2026-09-09 · Analyzed
6.5EPSS 0.006
CVE-2026-70489
Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing
Published 2026-08-04 · Analyzed
6.5EPSS 0.006
CVE-2026-59220
Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config
Published 2026-07-09 · Analyzed
6.5EPSS 0.006
CVE-2026-87014
Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes
Published 2026-09-09 · Analyzed
6.5EPSS 0.005
CVE-2026-70491
Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints
Published 2026-08-04 · Analyzed
6.5EPSS 0.005
CVE-2026-59222
Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials
Published 2026-07-09 · Analyzed
6.5EPSS 0.005
CVE-2026-45339
Open WebUI: API key endpoint restrictions bypassed via `x-api-key` header — full message processing on restricted endpoints
Published 2026-05-15 · Analyzed
6.5EPSS 0.004
CVE-2026-45667
Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)
Published 2026-05-15 · Analyzed
6.5EPSS 0.004
CVE-2026-70487
Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadata
Published 2026-08-04 · Analyzed
6.5EPSS 0.004
CVE-2026-45351
Open WebUI: Exposure of System Prompt to Regular User [Non-Admin]
Published 2026-05-15 · Modified
6.5EPSS 0.004
← Prev2 / 4Next →