# open-webui.

Every CVE that names open-webui among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy](https://agentprime.io/advisories/CVE-2026-109572.md)
  `CVE-2026-109572` · CVE record: open-webui open-webui · CVSS 7.2 High · Not analysed yet · Published 12 Oct 2026 · Tags: Broken access control
- [Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call Embeds](https://agentprime.io/advisories/CVE-2026-109300.md)
  `CVE-2026-109300` · CVE record: open-webui open-webui · CVSS 5.1 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validation](https://agentprime.io/advisories/CVE-2026-109299.md)
  `CVE-2026-109299` · CVE record: open-webui open-webui · CVSS 7.1 High · Not analysed yet · Published 12 Oct 2026 · Tags: Denial of service
- [Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regex](https://agentprime.io/advisories/CVE-2026-109298.md)
  `CVE-2026-109298` · CVE record: open-webui open-webui · CVSS 7.1 High · Not analysed yet · Published 12 Oct 2026 · Tags: Denial of service
- [Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence Rules](https://agentprime.io/advisories/CVE-2026-109297.md)
  `CVE-2026-109297` · CVE record: open-webui open-webui · CVSS 7.1 High · Not analysed yet · Published 12 Oct 2026 · Tags: Denial of service, CWE-436
- [Open WebUI before 0.11.4 Missing Authorization via Backend Index on Model Routes](https://agentprime.io/advisories/CVE-2026-109296.md)
  `CVE-2026-109296` · CVE record: open-webui open-webui · CVSS 5.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Broken access control
- [Open WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowledge_files Event Loop](https://agentprime.io/advisories/CVE-2026-109295.md)
  `CVE-2026-109295` · CVE record: open-webui open-webui · CVSS 5.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Denial of service
- [Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Image](https://agentprime.io/advisories/CVE-2026-109294.md)
  `CVE-2026-109294` · CVE record: open-webui open-webui · CVSS 7.1 High · Not analysed yet · Published 12 Oct 2026 · Tags: Denial of service, CWE-409
- [Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint](https://agentprime.io/advisories/CVE-2026-109293.md)
  `CVE-2026-109293` · CVE record: open-webui open-webui · CVSS 7.1 High · Not analysed yet · Published 12 Oct 2026 · Tags: Information disclosure
- [Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections](https://agentprime.io/advisories/CVE-2026-109292.md)
  `CVE-2026-109292` · CVE record: open-webui open-webui · CVSS 7.6 High · Not analysed yet · Published 12 Oct 2026 · Tags: Information disclosure
- [Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citation embed_url](https://agentprime.io/advisories/CVE-2026-109291.md)
  `CVE-2026-109291` · CVE record: open-webui open-webui · CVSS 8.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview](https://agentprime.io/advisories/CVE-2026-109290.md)
  `CVE-2026-109290` · CVE record: open-webui open-webui · CVSS 8.4 High · Not analysed yet · Published 12 Oct 2026 · Tags: Cross-site scripting (XSS), CWE-1021
- [Open WebUI 0.8.8 before 0.11.4 Improper Session Revocation via Terminal WebSocket](https://agentprime.io/advisories/CVE-2026-109289.md)
  `CVE-2026-109289` · CVE record: open-webui open-webui · CVSS 5.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Authentication bypass
- [Open WebUI before 0.11.4 Stored XSS via javascript: URLs in Markdown Links](https://agentprime.io/advisories/CVE-2026-109288.md)
  `CVE-2026-109288` · CVE record: open-webui open-webui · CVSS 7.2 High · Not analysed yet · Published 12 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Open WebUI 0.9.6 before 0.11.4 Information Disclosure via Unscoped Directory ID](https://agentprime.io/advisories/CVE-2026-109287.md)
  `CVE-2026-109287` · CVE record: open-webui open-webui · CVSS 5.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Broken access control
- [Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModal](https://agentprime.io/advisories/CVE-2026-109286.md)
  `CVE-2026-109286` · CVE record: open-webui open-webui · CVSS 8.6 High · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-346
- [Open WebUI 0.6.0 before 0.11.4 Improper Access Control via Stale File Metadata](https://agentprime.io/advisories/CVE-2026-109285.md)
  `CVE-2026-109285` · CVE record: open-webui open-webui · CVSS 2.3 Low · Not analysed yet · Published 12 Oct 2026 · Tags: Broken access control
- [Open WebUI 0.11.0 before 0.11.4 Improper Authorization via Chat Fork Endpoint](https://agentprime.io/advisories/CVE-2026-109284.md)
  `CVE-2026-109284` · CVE record: open-webui open-webui · CVSS 5.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Broken access control
- [Open WebUI 0.11.1 before 0.11.4 Authorization Bypass via OAuth Token Exchange](https://agentprime.io/advisories/CVE-2026-109283.md)
  `CVE-2026-109283` · CVE record: open-webui open-webui · CVSS 5.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Broken access control
- [Open WebUI - Server-Side Request Forgery via Location Redirect in /api/v1/retrieval/process/web](https://agentprime.io/advisories/CVE-2026-56399.md)
  `CVE-2026-56399` · CVE record: open-webui open-webui · CVSS 5.3 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Open WebUI Arbitrary File Upload + Path Traversal](https://agentprime.io/advisories/CVE-2024-6707.md)
  `CVE-2024-6707` · CVE record: Open WebUI Open WebUI · CVSS 7.5 High · Not analysed yet · Published 7 Aug 2024 · Tags: Path traversal, Unrestricted file upload
- [Open WebUI vulnerable to server-side request forgery in utils.py](https://agentprime.io/advisories/CVE-2024-30256.md)
  `CVE-2024-30256` · CVE record: open-webui open-webui · CVSS 6.4 Medium · Not analysed yet · Published 16 Apr 2024 · Tags: Server-side request forgery (SSRF)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=open-webui>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/open-webui/>. Everything for agents: <https://agentprime.io/llms.txt>.