OP
Product
open-webui
162
CVEs
0
On KEV
9.8
Max CVSS
19
New 30D
Severity mix
Critical 6High 57Medium 97Low 2
Watch
Add open-webui to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-54016 | 4.3 | Jun 23 | Open WebUI: Open WebUI BOLA: `search_knowledge_files` Allows Unauthorized Knowledge Base File Enumeration Affected: < 0.9.6 |
| CVE-2026-45386 | 4.3 | May 15 | Open WebUI: An IDOR vulnerability exists in the pin_channel_message API endpoint Affected: < 0.9.5 |
| CVE-2026-45387 | 4.3 | May 15 | Open WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt leakage) Affected: < 0.9.5 |
| CVE-2026-45385 | 4.3 | May 15 | Open WebUI: An IDOR vulnerability exists in the update_message_by_id API endpoint Affected: < 0.9.5 |
| CVE-2026-44557 | 4.3 | May 15 | Open WebUI: Global Knowledge Base Enumeration via knowledge-bases Meta-Collection Affected: < 0.9.0 |
| CVE-2026-44559 | 4.3 | May 15 | Open WebUI: Missing Access Check on Channel Members Endpoint for Standard Channels Affected: < 0.9.0 |
| CVE-2026-34225 | 4.3 | Apr 14 | Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionality Affected: <= 0.7.2 |
| CVE-2026-29071 | 4.3 | Mar 26 | Open WebUI's Insecure Direct Object Reference (IDOR) allows access to other users' memories Affected: < 0.8.6 |
| CVE-2026-28786 | 4.3 | Mar 26 | Open WebUI vulnerable to Path Traversal in `POST /api/v1/audio/transcriptions` Affected: < 0.8.6 |
| CVE-2026-70480 | 4.1 | Aug 4 | Open WebUI: Client-side SSRF via unrestricted external resource loading in Vega/Vega-Lite chart rendering Affected: >= 0.6.34, < 0.11.0 |
| CVE-2026-45316 | 3.5 | May 15 | Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access) Affected: < 0.9.3 |
| CVE-2026-59215 | 3.1 | Jul 9 | Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding Affected: < 0.10.0 |