Advisories · Technology
open-webui.
Every CVE that names open-webui among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy
- open-webui
- Broken access control
- CVSS 5.1 Medium
Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call Embeds
- open-webui
- Cross-site scripting (XSS)
- CVSS 7.1 High
Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validation
- open-webui
- Denial of service
- CVSS 7.1 High
Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regex
- open-webui
- Denial of service
- CVSS 7.1 High
Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence Rules
- open-webui
- Denial of service
- CWE-436
- CVSS 5.3 Medium
Open WebUI before 0.11.4 Missing Authorization via Backend Index on Model Routes
- open-webui
- Broken access control
- CVSS 5.3 Medium
Open WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowledge_files Event Loop
- open-webui
- Denial of service
- CVSS 7.1 High
Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Image
- open-webui
- Denial of service
- CWE-409
- CVSS 7.1 High
Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint
- open-webui
- Information disclosure
- CVSS 7.6 High
Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections
- open-webui
- Information disclosure
- CVSS 8.5 High
Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citation embed_url
- open-webui
- Cross-site scripting (XSS)
- CVSS 8.4 High
Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview
- open-webui
- Cross-site scripting (XSS)
- CWE-1021
- CVSS 5.3 Medium
Open WebUI 0.8.8 before 0.11.4 Improper Session Revocation via Terminal WebSocket
- open-webui
- Authentication bypass
- CVSS 7.2 High
Open WebUI before 0.11.4 Stored XSS via javascript: URLs in Markdown Links
- open-webui
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Open WebUI 0.9.6 before 0.11.4 Information Disclosure via Unscoped Directory ID
- open-webui
- Broken access control
- CVSS 8.6 High
Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModal
- open-webui
- CWE-346
- CVSS 2.3 Low
Open WebUI 0.6.0 before 0.11.4 Improper Access Control via Stale File Metadata
- open-webui
- Broken access control
- CVSS 5.3 Medium
Open WebUI 0.11.0 before 0.11.4 Improper Authorization via Chat Fork Endpoint
- open-webui
- Broken access control
- CVSS 5.3 Medium
Open WebUI 0.11.1 before 0.11.4 Authorization Bypass via OAuth Token Exchange
- open-webui
- Broken access control
- CVSS 5.3 Medium
Open WebUI - Server-Side Request Forgery via Location Redirect in /api/v1/retrieval/process/web
- open-webui
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Open WebUI Arbitrary File Upload + Path Traversal
- Open WebUI
- Path traversal
- Unrestricted file upload
- CVSS 6.4 Medium
Open WebUI vulnerable to server-side request forgery in utils.py
- open-webui
- Server-side request forgery (SSRF)