Login Request a demo
OP
Product
open-webui
by open-webui · last CVE Oct 12, 2026
158
CVEs
0
On KEV
9.8
Max CVSS
19
New 30D
Vulnerabilities158In the news0Timeline
Severity mix
Critical 6High 55Medium 95Low 2
Severity
All severities158Critical6High55Medium95Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add open-webui to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-45316
3.5
0%
May 15
Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access)
Affected: < 0.9.3
CVE-2026-59215
3.1
0%
Jul 9
Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding
Affected: < 0.10.0
Showing 2