Open-webui vulnerabilities
175 CVEs and advisories name Open-webui as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-109572Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy
- CVE-2026-109300Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call Embeds
- CVE-2026-109299Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validation
- CVE-2026-109298Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regex
- CVE-2026-109297Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence Rules
- CVE-2026-109296Open WebUI before 0.11.4 Missing Authorization via Backend Index on Model Routes
- CVE-2026-109295Open WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowledge_files Event Loop
- CVE-2026-109294Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Image
- CVE-2026-109293Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint
- CVE-2026-109292Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections
- CVE-2026-109291Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citation embed_url
- CVE-2026-109290Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview
- CVE-2026-109289Open WebUI 0.8.8 before 0.11.4 Improper Session Revocation via Terminal WebSocket
- CVE-2026-109288Open WebUI before 0.11.4 Stored XSS via javascript: URLs in Markdown Links
- CVE-2026-109287Open WebUI 0.9.6 before 0.11.4 Information Disclosure via Unscoped Directory ID
- CVE-2026-109286Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModal
- CVE-2026-109285Open WebUI 0.6.0 before 0.11.4 Improper Access Control via Stale File Metadata
- CVE-2026-109284Open WebUI 0.11.0 before 0.11.4 Improper Authorization via Chat Fork Endpoint
- CVE-2026-109283Open WebUI 0.11.1 before 0.11.4 Authorization Bypass via OAuth Token Exchange
- CVE-2026-88006Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange
- CVE-2026-88005Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange
- CVE-2026-88002Open WebUI: Any authenticated user can hang the server via a cyclic chat message history
- CVE-2026-88001Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets
- CVE-2026-88000Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree
- CVE-2026-87999Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch
- CVE-2026-87998Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion
- CVE-2026-87997Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions
- CVE-2026-87996Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader
- CVE-2026-87995Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin
- CVE-2026-87994Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint