Login Request a demo
OW
Product
Open Webui
by Openwebui · last CVE Sep 10, 2026
155
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities155In the news0Timeline
Severity mix
Critical 7High 57Medium 89Low 2
Severity
All severities155Critical7High57Medium89Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Open Webui to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-45316
3.5
0%
May 15
Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access)
Affected: before 0.9.3
CVE-2026-59215
3.1
0%
Jul 9
Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding
Affected: before 0.10.0
Showing 2