{
 "id": "AIR-2025-0218",
 "slug": "cve-2024-8053-open-webui-lacks-authentication-for-pdf-endpoi",
 "title": "CVE-2024-8053: Open WebUI Lacks Authentication for PDF Endpoint",
 "summary": "An unauthenticated endpoint vulnerability in Open WebUI allows malicious actors to access the PDF generation service. Attackers can exploit this by sending large payloads to exhaust server resources and cause denial of service.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Open WebUI"
 ],
 "incident_date": "2025-03-20",
 "incident_date_precision": "day",
 "first_reported": "2025-03-20",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-9vf8-xgwm-97r8",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2024-8053: Open WebUI lacks authentication for the `api/v1/utils/pdf` endpoint",
   "published_at": "2025-03-20"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2024-8053",
  "open-webui",
  "dos"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T07:00:14.101Z"
}