Login Request a demo
OP
Vendor
open-webui
1 product with CVEs on record
156
CVEs
0
On KEV
19
New 30D
Products
OP
open-webui
open-webui
9.8
156 CVEs0 on KEV19 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-109572
OP
open-webui
open-webui
7.6
0%
Oct 12Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy
CVE-2026-109300
OP
open-webui
open-webui
4.6
0%
Oct 12Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call Embeds
CVE-2026-109299
OP
open-webui
open-webui
6.5
0%
Oct 12Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validation
CVE-2026-109298
OP
open-webui
open-webui
6.5
0%
Oct 12Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regex
CVE-2026-109297
OP
open-webui
open-webui
6.5
0%
Oct 12Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence Rules
CVE-2026-109296
OP
open-webui
open-webui
4.3
0%
Oct 12Open WebUI before 0.11.4 Missing Authorization via Backend Index on Model Routes
CVE-2026-109295
OP
open-webui
open-webui
4.3
0%
Oct 12Open WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowledge_files Event Loop
CVE-2026-109294
OP
open-webui
open-webui
6.5
0%
Oct 12Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Image
CVE-2026-109293
OP
open-webui
open-webui
6.5
0%
Oct 12Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint
CVE-2026-109292
OP
open-webui
open-webui
6.8
0%
Oct 12Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections
CVE-2026-109291
OP
open-webui
open-webui
7.3
0%
Oct 12Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citation embed_url
CVE-2026-109290
OP
open-webui
open-webui
8.7
0%
Oct 12Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview
CVE-2026-109289
OP
open-webui
open-webui
6.3
0%
Oct 12Open WebUI 0.8.8 before 0.11.4 Improper Session Revocation via Terminal WebSocket
CVE-2026-109288
OP
open-webui
open-webui
6.4
0%
Oct 12Open WebUI before 0.11.4 Stored XSS via javascript: URLs in Markdown Links
CVE-2026-109287
OP
open-webui
open-webui
4.3
0%
Oct 12Open WebUI 0.9.6 before 0.11.4 Information Disclosure via Unscoped Directory ID
CVE-2026-109286
OP
open-webui
open-webui
8.1
0%
Oct 12Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModal
CVE-2026-109285
OP
open-webui
open-webui
5.0
0%
Oct 12Open WebUI 0.6.0 before 0.11.4 Improper Access Control via Stale File Metadata
CVE-2026-109284
OP
open-webui
open-webui
4.3
0%
Oct 12Open WebUI 0.11.0 before 0.11.4 Improper Authorization via Chat Fork Endpoint
CVE-2026-109283
OP
open-webui
open-webui
5.4
0%
Oct 12Open WebUI 0.11.1 before 0.11.4 Authorization Bypass via OAuth Token Exchange
CVE-2026-88006
OP
open-webui
open-webui
6.5
0%
Sep 10Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange
CVE-2026-88005
OP
open-webui
open-webui
6.5
0%
Sep 10Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange
CVE-2026-88002
OP
open-webui
open-webui
6.5
1%
Sep 9Open WebUI: Any authenticated user can hang the server via a cyclic chat message history
CVE-2026-88001
OP
open-webui
open-webui
5.0
0%
Sep 9Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets
CVE-2026-88000
OP
open-webui
open-webui
6.5
1%
Sep 9Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree
CVE-2026-87999
OP
open-webui
open-webui
7.1
0%
Sep 9Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch
CVE-2026-87998
OP
open-webui
open-webui
7.1
0%
Sep 9Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion
CVE-2026-87997
OP
open-webui
open-webui
4.3
0%
Sep 9Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions
CVE-2026-87996
OP
open-webui
open-webui
7.7
0%
Sep 9Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader
CVE-2026-87995
OP
open-webui
open-webui
8.7
0%
Sep 9Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin
CVE-2026-87994
OP
open-webui
open-webui
4.3
0%
Sep 9Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint
CVE-2026-87017
OP
open-webui
open-webui
4.3
0%
Sep 9Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends
CVE-2026-87016
OP
open-webui
open-webui
8.1
1%
Sep 9Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite
CVE-2026-87015
OP
open-webui
open-webui
6.8
0%
Sep 9Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication
CVE-2026-87014
OP
open-webui
open-webui
6.5
1%
Sep 9Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes
CVE-2026-87013
OP
open-webui
open-webui
4.3
0%
Sep 9Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle
CVE-2026-87012
OP
open-webui
open-webui
4.3
0%
Sep 9Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value
CVE-2026-87011
OP
open-webui
open-webui
7.5
1%
Sep 9Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout
CVE-2026-59714
OP
open-webui
open-webui
7.1
0%
Aug 13Open WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel message_ids)
CVE-2026-70494
OP
open-webui
open-webui
8.1
1%
Aug 4Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder
CVE-2026-70493
OP
open-webui
open-webui
6.5
1%
Aug 4Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrophically
CVE-2026-70492
OP
open-webui
open-webui
5.4
0%
Aug 4Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages
CVE-2026-70491
OP
open-webui
open-webui
6.5
0%
Aug 4Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints
CVE-2026-70490
OP
open-webui
open-webui
6.3
0%
Aug 4Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role check
CVE-2026-70489
OP
open-webui
open-webui
6.5
1%
Aug 4Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing
CVE-2026-54020
OP
open-webui
open-webui
6.3
0%
Aug 4Open WebUI: DNS Rebinding SSRF Bypass
CVE-2026-70488
OP
open-webui
open-webui
4.3
0%
Aug 4Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanup
CVE-2026-70487
OP
open-webui
open-webui
6.5
0%
Aug 4Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadata
CVE-2026-70486
OP
open-webui
open-webui
5.4
0%
Aug 4Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-origin
CVE-2026-70485
OP
open-webui
open-webui
7.1
0%
Aug 4Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs
CVE-2026-70484
OP
open-webui
open-webui
5.4
0%
Aug 4Open WebUI: Users denied the image-generation permission can still generate images via chat completions
CVE-2026-70483
OP
open-webui
open-webui
4.3
0%
Aug 4Open WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpoint
CVE-2026-70482
OP
open-webui
open-webui
8.8
1%
Aug 4Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client
CVE-2026-70481
OP
open-webui
open-webui
5.4
0%
Aug 4Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages
CVE-2026-70480
OP
open-webui
open-webui
4.1
0%
Aug 4Open WebUI: Client-side SSRF via unrestricted external resource loading in Vega/Vega-Lite chart rendering
CVE-2026-70479
OP
open-webui
open-webui
7.7
0%
Aug 4Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader
CVE-2026-56400
OP
open-webui
open-webui
9.6
1%
Jul 15open-webui - Remote Code Execution via CORS Misconfiguration and Session Validation
CVE-2026-56398
OP
open-webui
open-webui
9.0
1%
Jul 15Open WebUI - Stored Cross-Site Scripting via OAuth Picture Claim SVG Data URI
CVE-2026-59221
OP
open-webui
open-webui
7.7
0%
Jul 9open-webui terminal proxy path traversal guard bypass via 9x encoded traversal
CVE-2026-59225
OP
open-webui
open-webui
6.3
0%
Jul 9Open WebUI: Arena task endpoints can bypass underlying model access controls
CVE-2026-59224
OP
open-webui
open-webui
8.0
0%
Jul 9Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id header and ws_terminal session_id query injection)