{
 "id": "AIR-2025-0233",
 "slug": "ghsa-6wj5-5pgr-jwq8-open-webui-multipart-boundary-denial-of",
 "title": "Open WebUI Multipart Boundary Denial of Service",
 "summary": "Open WebUI has a denial of service vulnerability in the file upload API endpoint caused by malformed multipart boundaries. Uploading files with excessive characters in the boundary causes continuous server processing and makes the application inaccessible.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Open WebUI"
 ],
 "incident_date": "2025-03-20",
 "incident_date_precision": "day",
 "first_reported": "2025-03-20",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-6wj5-5pgr-jwq8",
   "publisher": "GitHub Advisory Database",
   "title": "GHSA-6wj5-5pgr-jwq8: Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability in api/chat/file",
   "published_at": "2025-03-20"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "ghsa-6wj5-5pgr-jwq8",
  "open-webui",
  "dos"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:14:26.300Z"
}