Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-45345Open WebUI: Missing authorization check at the model update function - models from other users can be updatedPyPI · open-webui · fixed in 0.5.7
- CVE-2026-45347Open WebUI: Blind server side request forgery (SSRF) via the PDF generate functionPyPI · open-webui · fixed in 0.5.11
- CVE-2026-45351Open WebUI: Exposure of System Prompt to Regular User [Non-Admin]PyPI · open-webui · fixed in 0.8.9
- CVE-2026-45666Open WebUI: Indirect Object Reference (IDOR) in user notesPyPI · open-webui · fixed in 0.8.11
- CVE-2026-45365Open WebUI: Authenticated users can bypass model access control via exposed query parameterPyPI · open-webui · fixed in 0.8.11
- CVE-2026-44570Open WebUI: Inconsistent authorization controls within memories APIPyPI · open-webui · fixed in 0.6.19
- CVE-2026-44569Open WebUI: Insecure Message Access Breaks AuthorizationPyPI · open-webui · fixed in 0.6.19
- CVE-2026-44566Open WebUI: Arbitrary File Upload and Path TraversalPyPI · open-webui · fixed in 0.1.124
- CVE-2026-44567Open WebUI: Open WebUI Improper Authorization ControlPyPI · open-webui · fixed in 0.1.124
- CVE-2026-45672Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassedPyPI · open-webui · fixed in 0.8.12
- CVE-2026-45400Open WebUI: Server-Side Request Forgery (SSRF) bypass in `validate_url`PyPI · open-webui · fixed in 0.9.5
- CVE-2026-45402Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach EndpointsPyPI · open-webui · fixed in 0.9.5
- CVE-2026-45401Open WebUI: SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load EndpointsPyPI · open-webui · fixed in 0.9.5
- CVE-2026-45386Open WebUI: An IDOR vulnerability exists in the pin_channel_message API endpointPyPI · open-webui · fixed in 0.9.5
- CVE-2026-45398Open WebUI: IDOR - Retrieval API Bypasses Knowledge Base Access ControlsPyPI · open-webui · fixed in 0.9.5
- CVE-2026-45397Open WebUI: Unauthenticated RAG Configuration DisclosurePyPI · open-webui · fixed in 0.9.5
- CVE-2026-45396Open WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data ManipulationPyPI · open-webui · fixed in 0.9.5
- CVE-2026-45387Open WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt leakage)PyPI · open-webui · fixed in 0.9.5
- CVE-2026-45385Open WebUI: An IDOR vulnerability exists in the update_message_by_id API endpointPyPI · open-webui · fixed in 0.9.5
- CVE-2026-44721Open WebUI: Stored XSS via Model DescriptionPyPI · open-webui · fixed in 0.9.0
- CVE-2026-44550Open WebUI: Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' AccountsPyPI · open-webui · fixed in 0.9.0
- CVE-2026-44551Open WebUI: LDAP Empty Password Authentication BypassPyPI · open-webui · fixed in 0.9.0
- CVE-2026-44552Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache PoisoningPyPI · open-webui · fixed in 0.9.0
- CVE-2026-44553Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note AccessPyPI · open-webui · fixed in 0.9.0
- CVE-2026-44554Open WebUI: Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection OverwritePyPI · open-webui · fixed in 0.9.0
- CVE-2026-44555Open WebUI: Base Model Routing Bypasses Access Control via Model ChainingPyPI · open-webui · fixed in 0.9.0
- CVE-2026-44556Open WebUI: responses passthrough endpoint lacks access control authorizationPyPI · open-webui · fixed in 0.9.0
- CVE-2026-44557Open WebUI: Global Knowledge Base Enumeration via knowledge-bases Meta-CollectionPyPI · open-webui · fixed in 0.9.0
- CVE-2026-44558Open WebUI: Channel Access Grants Bypass filter_allowed_access_grantsPyPI · open-webui · fixed in 0.9.0
- CVE-2026-44559Open WebUI: Missing Access Check on Channel Members Endpoint for Standard ChannelsPyPI · open-webui · fixed in 0.9.0