Vulnerabilities

TI-2026-60032 CVE-2026-88006 · GHSA-wvm9-9g5j-623f

Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange

LOW 35

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00371 Published 2026-09-10 Fixed in 0.11.1 CWE-863

TI-2026-60031 CVE-2026-88005 · GHSA-4qg5-cxx4-g927

Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange

LOW 35

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00371 Published 2026-09-10 Fixed in 0.9.0 CWE-863

TI-2026-60028 CVE-2026-88002 · GHSA-jqhh-cjmq-vmv6

Open WebUI: Any authenticated user can hang the server via a cyclic chat message history

LOW 30

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00583 Published 2026-09-09 Fixed in 0.11.1 CWE-835

TI-2026-60027 CVE-2026-88001 · GHSA-5x7x-4c3c-qf5w

Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets

MEDIUM 56

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00378 Published 2026-09-09 Fixed in 0.11.1 CWE-918

TI-2026-60026 CVE-2026-88000 · GHSA-3cgp-3cqx-j8w2

Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree

MEDIUM 62

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00592 Published 2026-09-09 Fixed in 0.11.1 CWE-835

TI-2026-60025 CVE-2026-87999 · GHSA-34r3-9m95-vq73

Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch

MEDIUM 64

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.0036 Published 2026-09-09 Fixed in 0.11.1 CWE-918

TI-2026-60024 CVE-2026-87998 · GHSA-2724-6cpj-gf3v

Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion

LOW 32

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00486 Published 2026-09-09 Fixed in 0.11.1 CWE-269

TI-2026-60023 CVE-2026-87997 · GHSA-3pf7-q2g3-wj28

Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions

MEDIUM 53

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00372 Published 2026-09-09 Fixed in 0.11.1 CWE-639

TI-2026-60022 CVE-2026-87996 · GHSA-4v28-j6q3-5m4r

Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader

LOW 34

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00354 Published 2026-09-09 Fixed in 0.11.1 CWE-367

TI-2026-60021 CVE-2026-87995 · GHSA-jmc6-2wr8-h3wj

Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin

HIGH 73

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00417 Published 2026-09-09 Fixed in 0.11.1 CWE-1021

TI-2026-60020 CVE-2026-87994 · GHSA-fmqh-xp37-5hr8

Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint

MEDIUM 53

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00372 Published 2026-09-09 Fixed in 0.11.1 CWE-639

TI-2026-59436 CVE-2026-87017 · GHSA-pcvc-8vrv-8q6w

Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends

LOW 20

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00372 Published 2026-09-09 Fixed in 0.11.1 CWE-200

TI-2026-59435 CVE-2026-87016 · GHSA-wpmr-8h3q-fwj7

Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite

HIGH 70

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00599 Published 2026-09-09 Fixed in 0.11.1 CWE-155

TI-2026-59434 CVE-2026-87015 · GHSA-p78m-89r6-pgf7

Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication

HIGH 65

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00478 Published 2026-09-09 Fixed in 0.11.1 CWE-201

TI-2026-59433 CVE-2026-87014 · GHSA-wjwr-xfp9-r66p

Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes

MEDIUM 64

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00513 Published 2026-09-09 Fixed in 0.11.1 CWE-613

TI-2026-59432 CVE-2026-87013 · GHSA-8r35-5x5r-hv74

Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle

MEDIUM 53

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00484 Published 2026-09-09 Fixed in 0.11.1 CWE-835

TI-2026-59431 CVE-2026-87012 · GHSA-v39v-59xw-j98g

Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value

LOW 21

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00484 Published 2026-09-09 Fixed in 0.11.1 CWE-1287

TI-2026-59430 CVE-2026-87011 · GHSA-3g9q-v48f-hh9w

Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout

HIGH 72

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00644 Published 2026-09-09 Fixed in 0.11.1 CWE-405

TI-2026-49267 CVE-2026-70494 · GHSA-3cg5-48j3-v4gv

Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder

LOW 36

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00548 Published 2026-08-04 Fixed in 0.11.0 CWE-862

TI-2026-49266 CVE-2026-70493 · GHSA-2f54-p244-32q6

Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrophically

MEDIUM 62

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00592 Published 2026-08-04 Fixed in 0.11.0 CWE-1333

TI-2026-49265 CVE-2026-70492 · GHSA-pwxh-7358-jq2x

Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages

HIGH 71

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00403 Published 2026-08-04 Fixed in 0.11.0 CWE-79

TI-2026-49264 CVE-2026-70491 · GHSA-3r7g-q6cg-q2vx

Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints

MEDIUM 62

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00478 Published 2026-08-04 Fixed in 0.11.0 CWE-200

TI-2026-49263 CVE-2026-70490 · GHSA-5gpj-vj23-vhhv

Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role check

LOW 28

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00283 Published 2026-08-04 Fixed in 0.11.0 CWE-863

TI-2026-49262 CVE-2026-70489 · GHSA-73cq-mcgh-379c

Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing

MEDIUM 62

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00573 Published 2026-08-04 Fixed in 0.11.0 CWE-1333

TI-2026-38969 CVE-2026-54020 · GHSA-h6x2-583h-x99r

Open WebUI: DNS Rebinding SSRF Bypass

LOW 28

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00252 Published 2026-08-04 Fixed in 0.11.0 CWE-367

Vulnerabilities

Filters