GCD AI RADAR
products/open-webui

Open WebUI

Filed as: open-webui

Records
186
Disclosed CVEs
186
Exploited (sev 3–4)
0
CISA KEV flagged
0

Newest record 2026-10-12 · 181 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)

Patch now: confirmed exploitation or KEV · 0

Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.

No record for Open WebUI has confirmed exploitation or a KEV flag.

Disclosures by month · last 24 months

Nov ’24182 disclosed · peak 60 in May ’26Oct ’26

Disclosed CVEs, no confirmed exploitation · 186

  1. 2026-10-12
    CVE-2026-109288
    CVE-2026-109288: Open WebUI stored XSS vulnerability allows JWT theft
    2 Disclosedxss · jwt-theft
    record AIR-2026-0314NVD ↗
  2. 2026-10-12
    CVE-2026-109293
    CVE-2026-109293: Open WebUI Tool Source Code Information Disclosure
    2 Disclosedinformation-disclosure · open-webui
    record AIR-2026-0313NVD ↗
  3. 2026-10-12
    CVE-2026-109291
    CVE-2026-109291: Open WebUI Cross-Site Scripting via Citation URLs
    2 Disclosedxss · open-webui
    record AIR-2026-0312NVD ↗
  4. 2026-10-12
    CVE-2026-109299
    CVE-2026-109299: Open WebUI Denial of Service via Recurrence Rules
    2 Discloseddos · open-webui
    record AIR-2026-0311NVD ↗
  5. 2026-10-12
    CVE-2026-109295
    CVE-2026-109295: Open WebUI Regular Expression Denial of Service Vulnerability
    2 Discloseddos · open-webui
    record AIR-2026-0310NVD ↗
  6. 2026-10-12
    CVE-2026-109290
    CVE-2026-109290: Open WebUI Stored XSS Vulnerability in DocxPreview
    2 Disclosedxss · open-webui
    record AIR-2026-0309NVD ↗
  7. 2026-10-12
    CVE-2026-109298
    CVE-2026-109298: Open WebUI vulnerable to regex denial of service in search tools
    2 Disclosedredos · open-webui
    record AIR-2026-0308NVD ↗
  8. 2026-10-12
    CVE-2026-109285
    CVE-2026-109285: Open WebUI former collaborators retain knowledge base file access
    2 Disclosedaccess-control · open-webui
    record AIR-2026-0307NVD ↗
  9. 2026-10-12
    CVE-2026-109289
    CVE-2026-109289: Open WebUI allows deactivated users to maintain terminal access
    2 Disclosedauthorization-bypass · open-webui
    record AIR-2026-0306NVD ↗
  10. 2026-10-12
    CVE-2026-109286
    CVE-2026-109286: Open WebUI cross-origin vulnerability allows session token theft
    2 Disclosedcsrf · open-webui
    record AIR-2026-0305NVD ↗
  11. 2026-10-12
    CVE-2026-109294
    CVE-2026-109294: Open WebUI vulnerable to memory exhaustion via crafted image URLs
    2 Discloseddenial-of-service · open-webui
    record AIR-2026-0304NVD ↗
  12. 2026-10-12
    CVE-2026-109296
    CVE-2026-109296: Open WebUI missing authorization exposes disabled model backends
    2 Disclosedmissing-authorization · api-key-exposure
    record AIR-2026-0303NVD ↗
  13. 2026-10-12
    CVE-2026-109572
    CVE-2026-109572: Open WebUI terminal proxy privilege escalation vulnerability
    2 Disclosedprivilege-escalation · terminal-proxy
    record AIR-2026-0302NVD ↗
  14. 2026-10-12
    CVE-2026-109292
    CVE-2026-109292: Open WebUI information disclosure leaks session cookies to OAuth servers
    2 Disclosedcookie-leak · session-hijacking
    record AIR-2026-0301NVD ↗
  15. 2026-10-12
    CVE-2026-109284
    CVE-2026-109284: Open WebUI chat fork handler improper authorization flaw
    2 Disclosedauthorization · access-control
    record AIR-2026-0300NVD ↗
  16. 2026-10-12
    CVE-2026-109287
    CVE-2026-109287: Open WebUI knowledge base authorization flaw exposes folder metadata
    2 Disclosedauthorization · information-disclosure
    record AIR-2026-0299NVD ↗
  17. 2026-10-12
    CVE-2026-109300
    CVE-2026-109300: Stored XSS in Open WebUI Markdown renderer
    2 Disclosedxss · markdown
    record AIR-2026-0298NVD ↗
  18. 2026-10-12
    CVE-2026-109297
    CVE-2026-109297: Denial of service in Open WebUI recurrence rule validator
    2 Discloseddos · open-webui
    record AIR-2026-0297NVD ↗
  19. 2026-10-12
    CVE-2026-109283
    CVE-2026-109283: Authorization bypass in Open WebUI OAuth token exchange
    2 Disclosedoauth · authorization-bypass
    record AIR-2026-0294NVD ↗
  20. 2026-09-10
    CVE-2026-88005
    CVE-2026-88005: Open WebUI OAuth email domain allowlist bypass vulnerability
    2 Disclosedopen-webui · oauth
    record AIR-2026-0105NVD ↗
  21. 2026-09-10
    CVE-2026-88006
    CVE-2026-88006: Open WebUI OAuth role management bypass vulnerability
    2 Disclosedopen-webui · oauth
    record AIR-2026-0104NVD ↗
  22. 2026-09-09
    CVE-2026-87016
    CVE-2026-87016: Open WebUI OAuth Account Takeover via SQLite Wildcards
    2 Disclosedoauth · authentication-bypass
    record AIR-2026-0932NVD ↗
  23. 2026-09-09
    CVE-2026-87995
    CVE-2026-87995: Open WebUI XSS via terminal port-preview iframe sandbox misconfiguration
    2 Disclosedxss · account-takeover
    record AIR-2026-0929NVD ↗
  24. 2026-09-09
    CVE-2026-87011
    CVE-2026-87011: Open WebUI unauthenticated OIDC logout server stall vulnerability
    2 Discloseddenial-of-service · oidc
    record AIR-2026-0928NVD ↗
  25. 2026-09-09
    CVE-2026-87017
    CVE-2026-87017: Open WebUI exposes inaccessible knowledge bases via vector search
    2 Disclosedvector-database · access-control
    record AIR-2026-0927NVD ↗
  26. 2026-09-09
    CVE-2026-87999
    CVE-2026-87999: Open WebUI server-side request fetch bypass to internal endpoints
    2 Disclosedopen-webui · ssrf
    record AIR-2026-0925NVD ↗
  27. 2026-09-09
    CVE-2026-87997
    CVE-2026-87997: Open WebUI chat injection into unauthorized user folders
    2 Disclosedopen-webui
    record AIR-2026-0924NVD ↗
  28. 2026-09-09
    CVE-2026-87014
    CVE-2026-87014: Open WebUI role demotion session caching authorization flaw
    2 Disclosedopen-webui
    record AIR-2026-0923NVD ↗
  29. 2026-09-09
    CVE-2026-87012
    CVE-2026-87012: Open WebUI instance-wide calendar alert suppression vulnerability
    2 Disclosedopen-webui
    record AIR-2026-0922NVD ↗
  30. 2026-09-09
    CVE-2026-87998
    CVE-2026-87998: Open WebUI unauthorized knowledge connection deletion
    2 Disclosedopen webui
    record AIR-2026-0919NVD ↗
  31. 2026-09-09
    CVE-2026-87996
    CVE-2026-87996: Open WebUI SSRF via DNS Rebinding in Playwright Loader
    2 Disclosedssrf · dns-rebinding · open-webui
    record AIR-2026-0916NVD ↗
  32. 2026-09-09
    CVE-2026-87994
    CVE-2026-87994: Open WebUI Channel Message Overwrite Vulnerability
    2 Disclosedopen-webui · access-control
    record AIR-2026-0915NVD ↗
  33. 2026-09-09
    CVE-2026-87015
    CVE-2026-87015: Open WebUI Session Cookie Leak to Tool Servers
    2 Disclosedopen-webui · cookie-leak
    record AIR-2026-0909NVD ↗
  34. 2026-09-09
    CVE-2026-87013
    CVE-2026-87013: Open WebUI Folder Loop Denial of Service Vulnerability
    2 Disclosedopen-webui · denial-of-service
    record AIR-2026-0908NVD ↗
  35. 2026-09-09
    CVE-2026-88001
    Open WebUI SSRF vulnerability via unvalidated HTTP redirect targets
    2 Disclosedssrf
    record AIR-2026-0907GitHub Advisory Database ↗
  36. 2026-09-09
    CVE-2026-88002
    Open WebUI server hang via cyclic chat message history
    2 Discloseddos
    record AIR-2026-0906GitHub Advisory Database ↗
  37. 2026-09-09
    CVE-2026-88000
    Open WebUI server hang vulnerability via cyclic chat message deletion
    2 Discloseddos
    record AIR-2026-0905GitHub Advisory Database ↗
  38. 2026-08-04
    CVE-2026-70479
    Open WebUI SSRF Vulnerability CVE-2026-70479 via Playwright
    2 Disclosedssrf
    record AIR-2026-0060NVD ↗
  39. 2026-08-04
    CVE-2026-70483
    Open WebUI Vulnerability CVE-2026-70483 Enables Chat Task Abortions
    2 Disclosedauthorization_bypass
    record AIR-2026-0059NVD ↗
  40. 2026-08-04
    CVE-2026-70480
    Open WebUI Vulnerability CVE-2026-70480 Allows Outbound Requests
    2 Disclosedssrf
    record AIR-2026-0058NVD ↗
  41. 2026-08-04
    CVE-2026-70492
    CVE-2026-70492: Open WebUI stored XSS vulnerability in math block rendering
    2 Disclosedinfra_vuln · xss
    record AIR-2026-0057NVD ↗
  42. 2026-08-04
    CVE-2026-70487
    CVE-2026-70487: Open WebUI unauthorized knowledge file access vulnerability
    2 Disclosedinfra_vuln · data_leak
    record AIR-2026-0056NVD ↗
  43. 2026-08-04
    CVE-2026-70481
    CVE-2026-70481: Open WebUI authorization flaw in standard channel messages
    2 Disclosedinfra_vuln · authorization
    record AIR-2026-0055NVD ↗
  44. 2026-08-04
    CVE-2026-70484
    CVE-2026-70484: Open WebUI permission check bypass in legacy chat completions
    2 Disclosedinfra_vuln · permission_bypass
    record AIR-2026-0054NVD ↗
  45. 2026-08-04
    CVE-2026-70490
    CVE-2026-70490: Open WebUI role gate bypass in terminal WebSocket route
    2 Disclosedinfra_vuln · auth_bypass
    record AIR-2026-0053NVD ↗
  46. 2026-08-04
    CVE-2026-54020
    CVE-2026-54020: Open WebUI vulnerable to DNS rebinding during URL validation
    2 Disclosedopen-webui · dns-rebinding
    record AIR-2026-0052NVD ↗
  47. 2026-08-04
    CVE-2026-70485
    CVE-2026-70485: Open WebUI vulnerable to SSRF through NAT64 IPv6 encoding
    2 Disclosedopen-webui · ssrf
    record AIR-2026-0051NVD ↗
  48. 2026-08-04
    CVE-2026-70482
    CVE-2026-70482: Open WebUI insecure OAuth token exchange vulnerability
    2 Disclosedopen-webui · oauth
    record AIR-2026-0050NVD ↗
  49. 2026-08-04
    CVE-2026-70493
    CVE-2026-70493: Open WebUI vulnerable to regular expression denial of service
    2 Disclosedopen-webui · redos
    record AIR-2026-0049NVD ↗
  50. 2026-08-04
    CVE-2026-70491
    CVE-2026-70491: Open WebUI leaks full Python tool source to non-admin users
    2 Disclosedopen-webui · infravuln
    record AIR-2026-0048NVD ↗
  51. 2026-08-04
    CVE-2026-70489
    CVE-2026-70489: Open WebUI automation recurrence parsing denial of service vulnerability
    2 Discloseddos
    record AIR-2026-0047NVD ↗
  52. 2026-08-04
    CVE-2026-70488
    CVE-2026-70488: Open WebUI knowledge base sync cleanup access control vulnerability
    2 Disclosedbroken_access_control
    record AIR-2026-0046NVD ↗
  53. 2026-08-04
    CVE-2026-70494
    CVE-2026-70494: Open WebUI folder deletion authorization bypass vulnerability
    2 Disclosedauthorization_bypass
    record AIR-2026-0045NVD ↗
  54. 2026-08-04
    CVE-2026-70486
    CVE-2026-70486: Open WebUI file-preview iframe vulnerability leads to account takeover
    2 Disclosedxss · account_takeover
    record AIR-2026-0044NVD ↗
  55. 2026-07-24
    CVE-2026-59714
    CVE-2026-59714: Open WebUI arbitrary message overwrite vulnerability
    2 Disclosedopenwebui
    record AIR-2026-0080GitHub Advisory Database ↗
  56. 2026-07-15
    CVE-2026-56398
    CVE-2026-56398: Stored XSS vulnerability in Open WebUI OAuth flow
    2 Disclosedxss · account-takeover
    record AIR-2026-1183NVD ↗
  57. 2026-07-09
    CVE-2026-59222
    Open WebUI channel members endpoint exposes sensitive credentials
    2 Disclosedopen-webui · information-disclosure
    record AIR-2026-0870NVD ↗
  58. 2026-07-09
    CVE-2026-59215
    Open WebUI thread ID binding flaw discloses private channel messages
    2 Disclosedopen-webui · authorization-bypass
    record AIR-2026-0869NVD ↗
  59. 2026-07-09
    CVE-2026-59220
    CVE-2026-59220: Open WebUI ReDoS in skill-mention regexes causes DoS
    2 Disclosedredos · denial-of-service
    record AIR-2026-0867NVD ↗
  60. 2026-07-09
    CVE-2026-59715
    CVE-2026-59715: Open WebUI unauthenticated WebSocket document access
    2 Disclosedwebsocket · authentication-bypass
    record AIR-2026-0866NVD ↗
  61. 2026-07-09
    CVE-2026-59221
    CVE-2026-59221: Open WebUI terminal proxy path traversal guard bypass
    2 Disclosedpath-traversal
    record AIR-2026-0865NVD ↗
  62. 2026-07-09
    CVE-2026-59217
    CVE-2026-59217: Open WebUI knowledge-base write-access bypass
    2 Disclosedaccess-control
    record AIR-2026-0864NVD ↗
  63. 2026-07-09
    CVE-2026-59212
    CVE-2026-59212: Open WebUI model meta.knowledge file access escalation
    2 Disclosedopen-webui · privilege-escalation
    record AIR-2026-0863NVD ↗
  64. 2026-07-09
    CVE-2026-59214
    CVE-2026-59214: Open WebUI stored web worker XSS via Pyodide
    2 Disclosedopen-webui · xss · pyodide
    record AIR-2026-0862NVD ↗
  65. 2026-07-09
    CVE-2026-59216
    CVE-2026-59216: Open WebUI cross-user code-interpreter and tool execution
    2 Disclosedopen-webui · session-hijacking
    record AIR-2026-0861NVD ↗
  66. 2026-07-09
    CVE-2026-59227
    CVE-2026-59227: Open WebUI image-edit authorization bypass
    2 Disclosedopen-webui · authorization-bypass
    record AIR-2026-0859NVD ↗
  67. 2026-07-09
    CVE-2026-59223
    CVE-2026-59223: Open WebUI WEB_FETCH_FILTER_LIST host filter bypass
    2 Disclosedopen-webui · ssrf · filter-bypass
    record AIR-2026-0858NVD ↗
  68. 2026-07-09
    CVE-2026-59213
    CVE-2026-59213: Open WebUI cross-user model-list exposure via static cache key
    2 Disclosedopen-webui · caching · information-disclosure
    record AIR-2026-0857NVD ↗
  69. 2026-07-09
    CVE-2026-59219
    CVE-2026-59219: Open WebUI realtime endpoints accept Redis-revoked JWTs
    2 Disclosedopen-webui · jwt · authentication
    record AIR-2026-0856NVD ↗
  70. 2026-07-09
    CVE-2026-59225
    CVE-2026-59225: Open WebUI Arena task endpoints bypass model access controls
    2 Disclosedopen-webui · access-control
    record AIR-2026-0855NVD ↗
  71. 2026-07-09
    CVE-2026-59218
    CVE-2026-59218: Open WebUI Account Enumeration via Timing Side-Channel
    2 Disclosedopen-webui · timing-attack
    record AIR-2026-0853NVD ↗
  72. 2026-07-09
    CVE-2026-59226
    CVE-2026-59226: Open WebUI Scheduled Automations Lifecycle Flaw
    2 Disclosedopen-webui · lifecycle-bypass
    record AIR-2026-0852NVD ↗
  73. 2026-07-09
    CVE-2026-59224
    CVE-2026-59224: Open WebUI Terminal Proxy User Identity Spoofing
    2 Disclosedopen-webui · identity-spoofing
    record AIR-2026-0851NVD ↗
  74. 2026-06-30
    CVE-2026-56399
    CVE-2026-56399: Open WebUI contains a server-side request forgery vulnerability in retrieval endpoint
    2 Disclosedopen_webui · ssrf · infra_vuln
    record AIR-2026-1140NVD ↗
  75. 2026-06-17
    CVE-2026-54016
    CVE-2026-54016: Open WebUI knowledge base file enumeration BOLA
    2 Disclosedopen-webui · bola
    record AIR-2026-0777GitHub Advisory Database ↗
  76. 2026-06-17
    CVE-2026-54022
    CVE-2026-54022: Open WebUI authentication bypass leaks private notes
    2 Disclosedopen-webui · bola
    record AIR-2026-0775GitHub Advisory Database ↗
  77. 2026-06-17
    CVE-2026-54007
    CVE-2026-54007: Open WebUI Cross-origin postMessage confirmation bypass
    2 Disclosedopen-webui · postmessage
    record AIR-2026-0774GitHub Advisory Database ↗
  78. 2026-06-17
    CVE-2026-54008
    CVE-2026-54008: Open WebUI Redirect-Bypass SSRF in OAuth Processing
    2 Disclosedssrf · oauth · open-webui
    record AIR-2026-0773GitHub Advisory Database ↗
  79. 2026-06-17
    CVE-2026-54011
    CVE-2026-54011: Open WebUI Stored XSS in Mermaid Markdown Preview
    2 Disclosedxss · open-webui
    record AIR-2026-0772GitHub Advisory Database ↗
  80. 2026-06-17
    CVE-2026-54009
    CVE-2026-54009: Open WebUI Cross-User File Disclosure Vulnerability
    2 Disclosedinsecure-direct-object-reference · open-webui
    record AIR-2026-0771GitHub Advisory Database ↗
  81. 2026-06-17
    CVE-2026-54018
    CVE-2026-54018: Open WebUI SSRF Protection Bypass via HTTP Redirects
    2 Disclosedssrf · open-webui
    record AIR-2026-0769GitHub Advisory Database ↗
  82. 2026-06-17
    CVE-2026-54017
    CVE-2026-54017: Open WebUI terminal server proxy path traversal and SSRF
    2 Disclosedssrf · path-traversal · open-webui
    record AIR-2026-0768GitHub Advisory Database ↗
  83. 2026-06-17
    CVE-2026-54014
    CVE-2026-54014: Open WebUI sibling-prefix path traversal in cache endpoint
    2 Disclosedpath-traversal · open-webui
    record AIR-2026-0767GitHub Advisory Database ↗
  84. 2026-06-17
    CVE-2026-54006
    CVE-2026-54006: Open WebUI calendar event re-parenting IDOR vulnerability
    2 Disclosedidor · open-webui
    record AIR-2026-0765GitHub Advisory Database ↗
  85. 2026-06-17
    CVE-2026-54010
    CVE-2026-54010: Open WebUI forged chat-file link leads to file read and deletion
    2 Disclosedidor · open-webui
    record AIR-2026-0764GitHub Advisory Database ↗
  86. 2026-06-17
    CVE-2026-54013
    CVE-2026-54013: Open WebUI Stored XSS via Model Profile Images
    2 Disclosedxss · open-webui
    record AIR-2026-0763GitHub Advisory Database ↗
  87. 2026-06-17
    CVE-2026-54012
    CVE-2026-54012: Open WebUI forged model meta.knowledge enables cross-user file access
    2 Disclosedopen-webui · authorization
    record AIR-2026-0759GitHub Advisory Database ↗
  88. 2026-06-17
    CVE-2026-54015
    CVE-2026-54015: Open WebUI prompt history IDOR allows cross-prompt read and deletion
    2 Disclosedopen-webui · idor
    record AIR-2026-0758GitHub Advisory Database ↗
  89. 2026-06-17
    CVE-2026-54019
    CVE-2026-54019: Open WebUI RAG ACL bypass in Milvus multitenancy mode
    2 Disclosedopen-webui · milvus · rag · acl-bypass
    record AIR-2026-0757GitHub Advisory Database ↗
  90. 2026-06-17
    CVE-2026-54021
    CVE-2026-54021: Open WebUI proxy bypass routes calls to arbitrary Ollama backends
    2 Disclosedopen-webui · ollama · access-control
    record AIR-2026-0756GitHub Advisory Database ↗
  91. 2026-05-15
    CVE-2026-45346
    CVE-2026-45346: Cross-Site Scripting in Open WebUI SVG Renderer
    2 Disclosedxss
    record AIR-2026-1080NVD ↗
  92. 2026-05-15
    CVE-2026-45339
    CVE-2026-45339: API Key Restriction Bypass in Open WebUI
    2 Disclosedauthentication-bypass
    record AIR-2026-1079NVD ↗
  93. 2026-05-15
    CVE-2026-45665
    CVE-2026-45665: Stored XSS in Open WebUI Banner Component
    2 Disclosedxss
    record AIR-2026-1078NVD ↗
  94. 2026-05-15
    CVE-2026-45395
    CVE-2026-45395: Permission Bypass in Open WebUI Tool Update Endpoint
    2 Disclosedauthorization-bypass
    record AIR-2026-1077NVD ↗
  95. 2026-05-15
    CVE-2026-45317
    CVE-2026-45317: CSRF Vulnerability in Open WebUI Image Uploads
    2 Disclosedcsrf
    record AIR-2026-1076NVD ↗
  96. 2026-05-14
    CVE-2026-45400
    CVE-2026-45400: Open WebUI SSRF Bypass in validate_url
    2 Disclosedssrf · open-webui
    record AIR-2026-0706GitHub Advisory Database ↗
  97. 2026-05-14
    CVE-2026-45351
    CVE-2026-45351: Open WebUI System Prompt Exposure to Non-Admin Users
    2 Disclosedprompt-leakage · open-webui
    record AIR-2026-0705GitHub Advisory Database ↗
  98. 2026-05-14
    CVE-2026-45675
    CVE-2026-45675: Open WebUI LDAP and OAuth Admin Race Condition
    2 Disclosedtoctou · open-webui
    record AIR-2026-0704GitHub Advisory Database ↗
  99. 2026-05-14
    CVE-2026-45318
    CVE-2026-45318: Open WebUI Stored XSS via Unsanitized Office Preview Rendering
    2 Disclosedxss · input-validation
    record AIR-2026-0700GitHub Advisory Database ↗
  100. 2026-05-14
    CVE-2026-45386
    CVE-2026-45386: Open WebUI IDOR Vulnerability in Message Pinning API
    2 Disclosedidor · access-control
    record AIR-2026-0699GitHub Advisory Database ↗
  101. 2026-05-14
    CVE-2026-45387
    CVE-2026-45387: Open WebUI System Prompt Exposure via Shared Model Permissions
    2 Disclosedsystem-prompt-leakage · access-control
    record AIR-2026-0698GitHub Advisory Database ↗
  102. 2026-05-14
    CVE-2026-45345
    CVE-2026-45345: Open WebUI Authorization Bypass Vulnerability in Model Updates
    2 Disclosedidor · authorization-bypass
    record AIR-2026-0697GitHub Advisory Database ↗
  103. 2026-05-14
    CVE-2026-45331
    CVE-2026-45331: Open WebUI SSRF Bypass in RAG Web Search Feature
    2 Disclosedssrf · rag
    record AIR-2026-0695GitHub Advisory Database ↗
  104. 2026-05-14
    CVE-2026-45338
    CVE-2026-45338: Open WebUI Vulnerable to SSRF via OAuth Profile Picture
    2 Disclosedssrf
    record AIR-2026-0694GitHub Advisory Database ↗
  105. 2026-05-14
    CVE-2026-45671
    CVE-2026-45671: Open WebUI shared-chat file deletion flaw
    2 Disclosedbroken_access_control
    record AIR-2026-0686GitHub Advisory Database ↗
  106. 2026-05-14
    CVE-2026-45316
    CVE-2026-45316: Open WebUI incorrect permission check for notes
    2 Disclosedauthorization
    record AIR-2026-0685GitHub Advisory Database ↗
  107. 2026-05-14
    CVE-2026-45303
    CVE-2026-45303: Open WebUI stored XSS in HTML rendering view
    2 Disclosedxss
    record AIR-2026-0684GitHub Advisory Database ↗
  108. 2026-05-14
    CVE-2026-45401
    CVE-2026-45401: Open WebUI SSRF bypass via HTTP redirect
    2 Disclosedssrf
    record AIR-2026-0683GitHub Advisory Database ↗
  109. 2026-05-14
    Open WebUI vulnerable to stored XSS via OAuth picture claim
    2 Disclosedghsa-3wgj-c2hg-vm6q · xss · open-webui
    record AIR-2026-0679GitHub Advisory Database ↗
  110. 2026-05-14
    CVE-2026-45349
    CVE-2026-45349: Open WebUI broken access control for completions API
    2 Disclosedbroken-access-control · open-webui
    record AIR-2026-0678GitHub Advisory Database ↗
  111. 2026-05-14
    CVE-2026-45385
    CVE-2026-45385: Open WebUI IDOR vulnerability in update_message_by_id endpoint
    2 Disclosedidor · open-webui
    record AIR-2026-0677GitHub Advisory Database ↗
  112. 2026-05-14
    CVE-2026-45299
    CVE-2026-45299: Open WebUI stored cross-site scripting in profile picture
    2 Disclosedxss
    record AIR-2026-0676GitHub Advisory Database ↗
  113. 2026-05-14
    CVE-2026-45314
    CVE-2026-45314: Open WebUI stored XSS via SVG webhook profile image
    2 Disclosedxss
    record AIR-2026-0675GitHub Advisory Database ↗
  114. 2026-05-14
    CVE-2026-45347
    CVE-2026-45347: Open WebUI blind SSRF vulnerability in PDF export
    2 Disclosedssrf
    record AIR-2026-0674GitHub Advisory Database ↗
  115. 2026-05-14
    CVE-2026-45365
    CVE-2026-45365: Open WebUI model access control bypass vulnerability
    2 Disclosedaccess-control
    record AIR-2026-0673GitHub Advisory Database ↗
  116. 2026-05-14
    CVE-2026-45667
    CVE-2026-45667: Open WebUI unauthenticated embedding generation DoS vulnerability
    2 Discloseddos
    record AIR-2026-0672GitHub Advisory Database ↗
  117. 2026-05-14
    CVE-2026-45315
    CVE-2026-45315: Open WebUI stored XSS via audio transcription uploads
    2 Disclosedxss · file-upload
    record AIR-2026-0671GitHub Advisory Database ↗
  118. 2026-05-14
    CVE-2026-45399
    CVE-2026-45399: Open WebUI background task disruption vulnerability
    2 Disclosedauthorization · denial-of-service
    record AIR-2026-0667GitHub Advisory Database ↗
  119. 2026-05-14
    CVE-2026-45396
    CVE-2026-45396: Open WebUI Mass Assignment User ID Spoofing
    2 Disclosedmass-assignment · open-webui
    record AIR-2026-0666GitHub Advisory Database ↗
  120. 2026-05-14
    CVE-2026-45397
    CVE-2026-45397: Open WebUI Unauthenticated RAG Config Disclosure
    2 Disclosedinformation-disclosure · open-webui · rag
    record AIR-2026-0665GitHub Advisory Database ↗
  121. 2026-05-14
    CVE-2026-45398
    CVE-2026-45398: Open WebUI Retrieval API Access Control Bypass
    2 Disclosedidor · open-webui · rag
    record AIR-2026-0664GitHub Advisory Database ↗
  122. 2026-05-14
    CVE-2026-45402
    CVE-2026-45402: Open WebUI Cross-User File Access Vulnerability
    2 Disclosedidor · open-webui · rag
    record AIR-2026-0663GitHub Advisory Database ↗
  123. 2026-05-14
    CVE-2026-45666
    CVE-2026-45666: Open WebUI IDOR Vulnerability in User Notes
    2 Disclosedidor · open-webui
    record AIR-2026-0662GitHub Advisory Database ↗
  124. 2026-05-14
    CVE-2026-45301
    Open WebUI Missing Permission Check in Files API
    2 Disclosedidor · authorization
    record AIR-2026-0657GitHub Advisory Database ↗
  125. 2026-05-14
    CVE-2026-45350
    CVE-2026-45350: Open WebUI chat completion API tool restriction bypass
    2 Disclosedaccess-control
    record AIR-2026-0656GitHub Advisory Database ↗
  126. 2026-05-11
    CVE-2026-44570
    CVE-2026-44570: Open WebUI Inconsistent Authorization in Memories API
    2 Disclosedauthorization · open-webui
    record AIR-2026-0651GitHub Advisory Database ↗
  127. 2026-05-11
    CVE-2026-44571
    CVE-2026-44571: Open WebUI Improper Authorization in Standard Channels
    2 Disclosedauthorization-bypass · open-webui
    record AIR-2026-0650GitHub Advisory Database ↗
  128. 2026-05-11
    CVE-2026-44569
    CVE-2026-44569: Open WebUI insecure message access and authorization flaw
    2 Disclosedopen-webui · idor
    record AIR-2026-0647GitHub Advisory Database ↗
  129. 2026-05-11
    Open WebUI CORS misconfiguration and session validation issue
    2 Disclosedghsa-6xcp-7mpr-m7wm · open-webui · cors
    record AIR-2026-0646GitHub Advisory Database ↗
  130. 2026-05-11
    CVE-2026-44565
    CVE-2026-44565: Open WebUI Arbitrary File Write, Delete via Path Traversal
    2 Disclosedopen-webui · path_traversal
    record AIR-2026-0645GitHub Advisory Database ↗
  131. 2026-05-08
    CVE-2026-44557
    CVE-2026-44557: Open WebUI vulnerable to Global Knowledge Base Enumeration
    2 Disclosedopen-webui · infra_vuln
    record AIR-2026-0643GitHub Advisory Database ↗
  132. 2026-05-08
    CVE-2026-44550
    CVE-2026-44550: Open WebUI Mass Assignment Vulnerability in Folder Creation
    2 Disclosedmass_assignment · pydantic
    record AIR-2026-0642GitHub Advisory Database ↗
  133. 2026-05-08
    CVE-2026-44553
    CVE-2026-44553: Open WebUI Stale Admin Role in Socket.IO Session Pool
    2 Disclosedsocket.io · session_management
    record AIR-2026-0641GitHub Advisory Database ↗
  134. 2026-05-08
    CVE-2026-44555
    CVE-2026-44555: Open WebUI Base Model Routing Access Control Bypass
    2 Disclosedmodel_chaining · routing
    record AIR-2026-0640GitHub Advisory Database ↗
  135. 2026-05-08
    CVE-2026-44563
    CVE-2026-44563: Open WebUI Ollama Model Access Control Bypass
    2 Disclosedaccess_control · ollama
    record AIR-2026-0639GitHub Advisory Database ↗
  136. 2026-05-08
    CVE-2026-44560
    CVE-2026-44560: Open WebUI Unauthorized File and Knowledge Base Access via RAG Vector Search
    2 Disclosedrag · vector_search
    record AIR-2026-0638GitHub Advisory Database ↗
  137. 2026-05-08
    CVE-2026-44567
    CVE-2026-44567: Open WebUI Improper Authorization Control Vulnerability
    2 Disclosedauthorization · open-webui
    record AIR-2026-0637GitHub Advisory Database ↗
  138. 2026-05-08
    CVE-2026-44554
    CVE-2026-44554: Open WebUI Vulnerable to RAG Poisoning via Collection Overwrite
    2 Disclosedrag · open-webui
    record AIR-2026-0636GitHub Advisory Database ↗
  139. 2026-05-08
    CVE-2026-44564
    CVE-2026-44564: Read-Only Open WebUI Users Can Modify Collaborative Docs
    2 Disclosedauthorization · open-webui
    record AIR-2026-0635GitHub Advisory Database ↗
  140. 2026-05-08
    CVE-2026-44721
    CVE-2026-44721: Open WebUI Vulnerable to Stored XSS via Model Description
    2 Disclosedxss · open-webui
    record AIR-2026-0634GitHub Advisory Database ↗
  141. 2026-05-08
    CVE-2026-44561
    CVE-2026-44561: Open WebUI Deactivated Channel Members Retain Access
    2 Disclosedauthorization · open-webui
    record AIR-2026-0633GitHub Advisory Database ↗
  142. 2026-05-08
    CVE-2026-44562
    CVE-2026-44562: Open WebUI Model Import Overwrites Models
    2 Disclosedaccess-control
    record AIR-2026-0632GitHub Advisory Database ↗
  143. 2026-05-08
    CVE-2026-44549
    CVE-2026-44549: Open WebUI stored XSS in Excel file preview
    2 Disclosedxss · file-preview
    record AIR-2026-0631GitHub Advisory Database ↗
  144. 2026-05-08
    CVE-2026-44568
    CVE-2026-44568: Open WebUI Stored XSS in Pending User Overlay
    2 Disclosedxss · stored-xss
    record AIR-2026-0629GitHub Advisory Database ↗
  145. 2026-05-08
    CVE-2026-44551
    CVE-2026-44551: Open WebUI LDAP Empty Password Authentication Bypass
    2 Disclosedldap · authentication-bypass
    record AIR-2026-0628GitHub Advisory Database ↗
  146. 2026-05-08
    CVE-2026-44559
    CVE-2026-44559: Open WebUI missing access check on channel members
    2 Disclosedaccess-control
    record AIR-2026-0627GitHub Advisory Database ↗
  147. 2026-05-08
    CVE-2026-44566
    CVE-2026-44566: Open WebUI arbitrary file upload and path traversal
    2 Disclosedpath-traversal · file-upload
    record AIR-2026-0626GitHub Advisory Database ↗
  148. 2026-05-08
    CVE-2026-44552
    CVE-2026-44552: Open WebUI missing instance prefix in Redis cache
    2 Disclosedredis · cache-poisoning
    record AIR-2026-0625GitHub Advisory Database ↗
  149. 2026-05-08
    CVE-2026-44556
    CVE-2026-44556: Open WebUI responses endpoint lacks authorization
    2 Disclosedauthorization
    record AIR-2026-0624GitHub Advisory Database ↗
  150. 2026-05-08
    CVE-2026-44558
    CVE-2026-44558: Open WebUI channel access control bypass
    2 Disclosedaccess-control
    record AIR-2026-0623GitHub Advisory Database ↗
  151. 2026-04-14
    CVE-2026-34225
    CVE-2026-34225: Open WebUI blind SSRF in image edit functionality
    2 Disclosedssrf
    record AIR-2026-0798NVD ↗
  152. 2026-04-01
    CVE-2026-34222
    CVE-2026-34222: Open WebUI Broken Access Control in Tool Valves
    2 Disclosedbroken-access-control
    record AIR-2026-0540GitHub Advisory Database ↗
  153. 2026-03-27
    CVE-2026-29070
    CVE-2026-29070: Open WebUI unauthorized deletion of knowledge files
    2 Disclosedaccess-control · open-webui
    record AIR-2026-0532GitHub Advisory Database ↗
  154. 2026-03-27
    CVE-2026-28786
    CVE-2026-28786: Open WebUI vulnerable to path traversal in audio endpoint
    2 Disclosedpath-traversal · open-webui
    record AIR-2026-0531GitHub Advisory Database ↗
  155. 2026-03-27
    CVE-2026-29071
    CVE-2026-29071: Open WebUI IDOR allows access to other users' memories
    2 Disclosedidor · open-webui
    record AIR-2026-0530GitHub Advisory Database ↗
  156. 2026-03-27
    CVE-2026-28788
    CVE-2026-28788: Open WebUI File Overwrite Vulnerability
    2 Disclosedopen-webui · rag
    record AIR-2026-0526GitHub Advisory Database ↗
  157. 2026-02-19
    CVE-2026-26192
    CVE-2026-26192: Open WebUI stored XSS via citation document metadata
    2 Disclosedxss
    record AIR-2026-0799NVD ↗
  158. 2026-02-19
    CVE-2026-26193
    CVE-2026-26193: Open WebUI stored XSS via iFrame embed properties
    2 Disclosedxss
    record AIR-2026-0797NVD ↗
  159. 2025-12-04
    CVE-2025-65959
    Open WebUI Stored XSS Vulnerability CVE-2025-65959
    2 Disclosedxss · infra_vuln
    record AIR-2025-0508NVD ↗
  160. 2025-12-04
    CVE-2025-63681
    CVE-2025-63681: Open WebUI Incorrect Access Control Vulnerability
    2 Disclosedaccess-control
    record AIR-2025-0387GitHub Advisory Database ↗
  161. 2025-12-04
    CVE-2025-65958
    CVE-2025-65958: Open WebUI SSRF via Web Retrieval API
    2 Disclosedssrf
    record AIR-2025-0386GitHub Advisory Database ↗
  162. 2025-11-07
    CVE-2025-64495
    CVE-2025-64495: Open WebUI vulnerable to Stored DOM XSS via prompts
    2 Disclosedxss
    record AIR-2025-0369GitHub Advisory Database ↗
  163. 2025-11-07
    CVE-2025-64496
    CVE-2025-64496: Open WebUI code injection via SSE events
    2 Disclosedcode-injection
    record AIR-2025-0368GitHub Advisory Database ↗
  164. 2025-05-05
    CVE-2025-46571
    CVE-2025-46571: Open WebUI stored XSS via uploaded HTML file
    2 Disclosedxss
    record AIR-2026-0796NVD ↗
  165. 2025-05-05
    CVE-2025-46719
    CVE-2025-46719: Open WebUI vulnerable to stored XSS in chat transcripts
    2 Disclosedopen-webui · xss
    record AIR-2026-0794NVD ↗
  166. 2025-03-20
    CVE-2024-7046
    CVE-2024-7046: Open WebUI Access Control Flaw Exposes Admin Details
    2 Disclosedaccess-control · open-webui
    record AIR-2025-0254GitHub Advisory Database ↗
  167. 2025-03-20
    CVE-2024-7983
    CVE-2024-7983: Open WebUI Denial of Service via Markdown Endpoint
    2 Disclosedopen-webui · dos
    record AIR-2025-0252GitHub Advisory Database ↗
  168. 2025-03-20
    Open WebUI vulnerable to denial of service via starlette dependency
    2 Disclosedghsa-w466-2wfc-8g58 · denial-of-service · dependency
    record AIR-2025-0244GitHub Advisory Database ↗
  169. 2025-03-20
    CVE-2024-7044
    CVE-2024-7044: Open WebUI stored cross-site scripting via file upload
    2 Disclosedxss · open-webui
    record AIR-2025-0237GitHub Advisory Database ↗
  170. 2025-03-20
    CVE-2024-7990
    CVE-2024-7990: Open WebUI stored cross-site scripting vulnerability
    2 Disclosedxss · open-webui
    record AIR-2025-0235GitHub Advisory Database ↗
  171. 2025-03-20
    Open WebUI Multipart Boundary Denial of Service
    2 Disclosedghsa-6wj5-5pgr-jwq8 · open-webui · dos
    record AIR-2025-0233GitHub Advisory Database ↗
  172. 2025-03-20
    CVE-2024-7806
    CVE-2024-7806: Open WebUI Cross-Site Request Forgery Vulnerability
    2 Disclosedcsrf · open-webui · rce
    record AIR-2025-0232GitHub Advisory Database ↗
  173. 2025-03-20
    CVE-2024-7036
    CVE-2024-7036: Open WebUI Uncontrolled Resource Consumption
    2 Disclosedopen-webui · dos
    record AIR-2025-0230GitHub Advisory Database ↗
  174. 2025-03-20
    CVE-2024-8060
    Open WebUI Remote Code Execution via Audio Transcription API
    2 Disclosedrce · infravuln
    record AIR-2025-0228GitHub Advisory Database ↗
  175. 2025-03-20
    CVE-2024-7045
    Open WebUI Improper Access Control Leads to Arbitrary Prompt Read
    2 Disclosedaccess-control · infravuln
    record AIR-2025-0224GitHub Advisory Database ↗
  176. 2025-03-20
    CVE-2024-7043
    CVE-2024-7043: Open WebUI Arbitrary File Access and Deletion Vulnerability
    2 Disclosedpath-traversal · open-webui
    record AIR-2025-0220GitHub Advisory Database ↗
  177. 2025-03-20
    CVE-2024-12537
    CVE-2024-12537: Open WebUI Uncontrolled Resource Consumption vulnerability
    2 Discloseddos · open-webui
    record AIR-2025-0219GitHub Advisory Database ↗
  178. 2025-03-20
    CVE-2024-8053
    CVE-2024-8053: Open WebUI Lacks Authentication for PDF Endpoint
    2 Disclosedopen-webui · dos
    record AIR-2025-0218GitHub Advisory Database ↗
  179. 2025-03-20
    CVE-2024-7053
    CVE-2024-7053: Open WebUI session fixation vulnerability
    2 Disclosedsession-fixation
    record AIR-2025-0216GitHub Advisory Database ↗
  180. 2025-03-20
    Open WebUI unauthenticated DoS vulnerability
    2 Disclosedghsa-5ccf-884p-4jjq · denial-of-service
    record AIR-2025-0215GitHub Advisory Database ↗
  181. 2025-03-20
    CVE-2024-12534
    CVE-2024-12534: Open WebUI Uncontrolled Resource Consumption Vulnerability
    2 Discloseddos · resource-exhaustion
    record AIR-2025-0211GitHub Advisory Database ↗
  182. 2025-03-20
    CVE-2024-7035
    CVE-2024-7035: Open WebUI vulnerable to Cross-Site Request Forgery
    2 Disclosedcsrf
    record AIR-2025-0208GitHub Advisory Database ↗
  183. 2024-10-09
    CVE-2024-7037
    CVE-2024-7037: open-webui allows writing and deleting arbitrary files
    2 Disclosedarbitrary-file-write · open-webui
    record AIR-2024-0176GitHub Advisory Database ↗
  184. 2024-10-09
    CVE-2024-7041
    CVE-2024-7041: open-webui IDOR vulnerability allows editing memories
    2 Disclosedidor · open-webui
    record AIR-2024-0175GitHub Advisory Database ↗
  185. 2024-08-08
    CVE-2024-6706
    CVE-2024-6706: Open WebUI Stored Cross-Site Scripting
    2 Disclosedxss · open-webui
    record AIR-2024-0160GitHub Advisory Database ↗
  186. 2024-04-16
    CVE-2024-30256
    CVE-2024-30256: Open WebUI authenticated blind SSRF vulnerability
    2 Disclosedssrf · infra_vuln
    record AIR-2024-0227NVD ↗

This page lists what has been reported, not what to do about it. Versions and fixes are in each linked advisory; check the vendor’s own advisory before acting.