Open-webui vulnerabilities
175 CVEs and advisories name Open-webui as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-34225Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionality
- CVE-2026-34222Open WebUI has Broken Access Control in Tool Valves
- CVE-2026-29071Open WebUI's Insecure Direct Object Reference (IDOR) allows access to other users' memories
- CVE-2026-29070Open WebUI has unauthorized deletion of knowledge files
- CVE-2026-28788Open WebUI's process_files_batch() endpoint missing ownership check, allows unauthorized file overwrite
- CVE-2026-28786Open WebUI vulnerable to Path Traversal in `POST /api/v1/audio/transcriptions`
- CVE-2026-26193Open WebUI vulnerable to Stored XSS via iFrame embeds in response messages
- CVE-2026-26192Open WebUI vulnerable to Stored XSS via iFrame in citations model
- CVE-2025-65959Open WebUI vulnerable to Stored DOM XSS via Note 'Download PDF'
- CVE-2025-65958Open WebUI vulnerable to Server-Side Request Forgery (SSRF) via Arbitrary URL Processing in /api/v1/retrieval/process/web
- CVE-2025-64496Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events
- CVE-2025-64495Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE
- CVE-2025-46719Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions
- CVE-2025-46571Open WebUI vulnerable to limited stored XSS vila uploaded html file
- CVE-2024-8017Cross-site Scripting (XSS) in open-webui/open-webui
- CVE-2024-8053Improper Authentication in open-webui/open-webui
- CVE-2024-7043Improper Access Control in open-webui/open-webui
- CVE-2024-7983Denial of Service in open-webui/open-webui
- CVE-2024-7044Stored XSS in open-webui/open-webui
- CVE-2024-7035Cross-Site Request Forgery (CSRF) in open-webui/open-webui
- CVE-2024-7048IDOR in open-webui/open-webui
- CVE-2024-7041IDOR in open-webui/open-webui
- CVE-2024-6707Open WebUI Arbitrary File Upload + Path Traversal
- CVE-2024-6706Open WebUI Stored Cross-Site Scripting
- CVE-2024-30256Open WebUI vulnerable to server-side request forgery in utils.py