VendorsOpen WebUIopen_webuiany version

Vulnerabilities

Open WebUI Open Webui any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

144CVEs

CVE-2026-45666

Open WebUI: Indirect Object Reference (IDOR) in user notes

Published 2026-05-15 · Analyzed

6.5EPSS 0.004

CVE-2026-54019

Open WebUI: RAG ACL Bypass in Milvus Multitenancy Mode

Published 2026-06-23 · Analyzed

6.5EPSS 0.004

CVE-2026-54009

Open WebUI: Cross-user file disclosure via /api/chat/completions image_url field

Published 2026-06-23 · Analyzed

6.5EPSS 0.004

CVE-2026-44560

Open WebUI: Unauthorized File and Knowledge Base Content Access via RAG Vector Search

Published 2026-05-15 · Analyzed

6.5EPSS 0.004

CVE-2026-88006

Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange

Published 2026-09-10 · Analyzed

6.5EPSS 0.004

CVE-2026-88005

Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange

Published 2026-09-10 · Analyzed

6.5EPSS 0.004

CVE-2026-59715

Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave)

Published 2026-07-09 · Analyzed

6.5EPSS 0.004

CVE-2026-44562

Open WebUI: Model Import Overwrites Any Model Without Ownership Check

Published 2026-05-15 · Analyzed

6.5EPSS 0.004

CVE-2026-44571

Open WebUI: Improper Authorization in Standard Channels Allows Message Updates with Read Permission

Published 2026-05-15 · Analyzed

6.5EPSS 0.003

CVE-2026-45345

Open WebUI: Missing authorization check at the model update function - models from other users can be updated

Published 2026-05-15 · Analyzed

6.5EPSS 0.003

CVE-2024-30256

Open WebUI vulnerable to server-side request forgery in utils.py

Published 2024-04-16 · Analyzed

6.4EPSS 0.004

CVE-2026-54015

Open WebUI: Prompt history IDOR: unbound history_id allows cross-prompt read and deletion

Published 2026-06-23 · Analyzed

6.4EPSS 0.003

CVE-2026-59225

Open WebUI: Arena task endpoints can bypass underlying model access controls

Published 2026-07-09 · Analyzed

6.3EPSS 0.004

CVE-2026-70490

Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role check

Published 2026-08-04 · Analyzed

6.3EPSS 0.003

CVE-2026-54021

Open WebUI: Authenticated users can target arbitrary configured Ollama backends via unguarded url_idx path parameter

Published 2026-06-23 · Analyzed

6.3EPSS 0.003

CVE-2026-54020

Open WebUI: DNS Rebinding SSRF Bypass

Published 2026-08-04 · Analyzed

6.3EPSS 0.003

CVE-2025-46719

Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions

Published 2025-05-05 · Analyzed

5.4EPSS 0.005

CVE-2026-70481

Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages

Published 2026-08-04 · Analyzed

5.4EPSS 0.004

CVE-2026-59227

Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permission

Published 2026-07-09 · Modified

5.4EPSS 0.004

CVE-2026-70484

Open WebUI: Users denied the image-generation permission can still generate images via chat completions

Published 2026-08-04 · Analyzed

5.4EPSS 0.004

CVE-2026-45396

Open WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data Manipulation

Published 2026-05-15 · Analyzed

5.4EPSS 0.004

CVE-2025-46571

Open WebUI vulnerable to limited stored XSS vila uploaded html file

Published 2025-05-05 · Analyzed

5.4EPSS 0.004

CVE-2026-44563

Open WebUI: Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings, and /api/show

Published 2026-05-15 · Analyzed

5.4EPSS 0.003

CVE-2026-44564

Open WebUI: Read-Only Users Can Modify Collaborative Documents via Socket.IO

Published 2026-05-15 · Analyzed

5.4EPSS 0.003

CVE-2026-44558

Open WebUI: Channel Access Grants Bypass filter_allowed_access_grants

Published 2026-05-15 · Modified

5.4EPSS 0.003

CVE-2026-45365

Open WebUI: Authenticated users can bypass model access control via exposed query parameter

Published 2026-05-15 · Modified

5.4EPSS 0.003

CVE-2026-44561

Open WebUI: Deactivated Channel Members Retain Full Access to Group/DM Channels

Published 2026-05-15 · Analyzed

5.4EPSS 0.003

CVE-2026-45347

Open WebUI: Blind server side request forgery (SSRF) via the PDF generate function

Published 2026-05-15 · Analyzed

5.4EPSS 0.003

CVE-2026-45318

Open WebUI: Stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html} without DOMPurify)

Published 2026-05-15 · Analyzed

5.4EPSS 0.002

CVE-2026-45346

Open WebUI: Stored Cross-Site Scripting in SVG Renderer

Published 2026-05-15 · Analyzed

5.4EPSS 0.002

CVE-2026-45299

Open WebUI: Stored Cross-Site Scripting In Profile Picture

Published 2026-05-15 · Analyzed

5.4EPSS 0.002

CVE-2026-45397

Open WebUI: Unauthenticated RAG Configuration Disclosure

Published 2026-05-15 · Analyzed

5.3EPSS 0.008

CVE-2026-59218

Open WebUI: Account enumeration via observable login timing discrepancy

Published 2026-07-09 · Analyzed

5.3EPSS 0.004

CVE-2026-54022

Open WebUI: Any authenticated user can read other users' private notes via Socket.IO

Published 2026-06-23 · Analyzed

5.3EPSS 0.003

CVE-2026-88001

Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets

Published 2026-09-09 · Analyzed

5.0EPSS 0.004

CVE-2026-59213

Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)

Published 2026-07-09 · Analyzed

5.0EPSS 0.004

CVE-2026-44550

Open WebUI: Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts

Published 2026-05-15 · Analyzed

5.0EPSS 0.003

CVE-2026-44568

Open WebUI: Stored XSS in Pending User Overlay via Incorrect DOMPurify Application Order

Published 2026-05-15 · Analyzed

4.8EPSS 0.003

CVE-2026-45317

Open WebUI: Cross-Site Request Forgery (CSRF) via Image URL Manipulation

Published 2026-05-15 · Analyzed

4.6EPSS 0.001

CVE-2026-59226

Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation

Published 2026-07-09 · Analyzed

4.3EPSS 0.005

Open WebUI Open Webui any version

Security check