OP
Product
open-webui
162
CVEs
0
On KEV
9.8
Max CVSS
19
New 30D
Severity mix
Critical 6High 57Medium 97Low 2
Watch
Add open-webui to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-45350 | 7.1 | May 15 | Open WebUI: Chat completion API allows tool restrictions to be bypassed Affected: < 0.8.6 |
| CVE-2026-44569 | 7.1 | May 15 | Open WebUI: Insecure Message Access Breaks Authorization Affected: < 0.6.19 |
| CVE-2026-44556 | 7.1 | May 15 | Open WebUI: responses passthrough endpoint lacks access control authorization Affected: < 0.9.0 |
| CVE-2026-45349 | 7.1 | May 15 | Open WebUI: Broken Access Control for Completions API Affected: < 0.9.0 |
| CVE-2026-45399 | 7.1 | May 15 | Open WebUI: Low-privilege authenticated users can enumerate and stop global background tasks, causing system-wide chat disruption Affected: < 0.9.0 |
| CVE-2026-28788 | 7.1 | Mar 26 | Open WebUI's process_files_batch() endpoint missing ownership check, allows unauthorized file overwrite Affected: < 0.8.6 |
| CVE-2025-65958 | 7.1 | Dec 4 | Open WebUI vulnerable to Server-Side Request Forgery (SSRF) via Arbitrary URL Processing in /api/v1/retrieval/process/web Affected: < 0.6.37 |