VendorsOpen WebUIopen_webui0.6.32
Vulnerabilities

Open WebUI Open Webui 0.6.32

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2026-0766
Open WebUI load_tool_module_by_id Command Injection Remote Code Execution Vulnerability
Published 2026-01-23 · Rejected
n/aEPSS 0.260
CVE-2026-0765
Open WebUI PIP install_frontmatter_requirements Command Injection Remote Code Execution Vulnerability
Published 2026-01-23 · Rejected
n/aEPSS 0.016
CVE-2026-0767
Open WebUI Cleartext Transmission of Credentials Information Disclosure Vulnerability
Published 2026-01-23 · Rejected
n/aEPSS 0.003