Open-webui vulnerabilities
175 CVEs and advisories name Open-webui as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-54017Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal
- CVE-2026-45338Open WebUI: SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)
- CVE-2026-44549Open WebUI: Stored XSS in excel file preview
- CVE-2026-45299Open WebUI: Stored Cross-Site Scripting In Profile Picture
- CVE-2026-45665Open WebUI: Stored XSS in Banner Component via Improper Sanitization Order
- CVE-2026-45667Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)
- CVE-2026-44565Open WebUI: Open WebUI Arbitrary File Write, Delete via Path Traversal
- CVE-2026-45314Open WebUI: XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/image
- CVE-2026-45316Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access)
- CVE-2026-45317Open WebUI: Cross-Site Request Forgery (CSRF) via Image URL Manipulation
- CVE-2026-45318Open WebUI: Stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html} without DOMPurify)
- CVE-2026-45315Open WebUI: Stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptions
- CVE-2026-44571Open WebUI: Improper Authorization in Standard Channels Allows Message Updates with Read Permission
- CVE-2026-45350Open WebUI: Chat completion API allows tool restrictions to be bypassed
- CVE-2026-45303Open WebUI: Stored XSS via the HTML renedering view
- CVE-2026-45301Open WebUI: Missing permission check in files API allows authenticated users to list, access and delete every uploaded file
- CVE-2026-45345Open WebUI: Missing authorization check at the model update function - models from other users can be updated
- CVE-2026-45346Open WebUI: Stored Cross-Site Scripting in SVG Renderer
- CVE-2026-45347Open WebUI: Blind server side request forgery (SSRF) via the PDF generate function
- CVE-2026-45351Open WebUI: Exposure of System Prompt to Regular User [Non-Admin]
- CVE-2026-45666Open WebUI: Indirect Object Reference (IDOR) in user notes
- CVE-2026-45365Open WebUI: Authenticated users can bypass model access control via exposed query parameter
- CVE-2026-44570Open WebUI: Inconsistent authorization controls within memories API
- CVE-2026-44569Open WebUI: Insecure Message Access Breaks Authorization
- CVE-2026-44566Open WebUI: Arbitrary File Upload and Path Traversal
- CVE-2026-44567Open WebUI: Open WebUI Improper Authorization Control
- CVE-2026-45672Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed
- CVE-2026-45400Open WebUI: Server-Side Request Forgery (SSRF) bypass in `validate_url`
- CVE-2026-45402Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach Endpoints
- CVE-2026-45401Open WebUI: SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints