open-webui vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-88006Mediumopen-webui: Open WebUI: Users denied by the OAuth role policy can still sign in via token exchangeCVE-2026-87011Highopen-webui: Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logoutCVE-2026-87012Mediumopen-webui: Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert valueCVE-2026-87013Mediumopen-webui: Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycleCVE-2026-87014Mediumopen-webui: Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notesCVE-2026-87015Mediumopen-webui: Open WebUI: A user's session cookies are sent to tool servers configured for bearer authenticationCVE-2026-87016Highopen-webui: Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLiteCVE-2026-87017Mediumopen-webui: Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backendsCVE-2026-87994Mediumopen-webui: Open WebUI: Channel members can overwrite another member's message via the chat completions endpointCVE-2026-87995Highopen-webui: Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-originCVE-2026-87996Highopen-webui: Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loaderCVE-2026-87997Mediumopen-webui: Open WebUI: Any authenticated user can inject chats into another user's folder via chat completionsCVE-2026-87998Highopen-webui: Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletionCVE-2026-87999Highopen-webui: Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetchCVE-2026-88005Mediumopen-webui: Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchangeCVE-2026-88000Mediumopen-webui: Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat treeCVE-2026-88001Mediumopen-webui: Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targetsCVE-2026-88002Mediumopen-webui: Open WebUI: Any authenticated user can hang the server via a cyclic chat message historyCVE-2026-70494Highopen-webui: Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolderCVE-2026-70493Mediumopen-webui: Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrophicallyCVE-2026-70492Highopen-webui: Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messagesCVE-2026-70491Mediumopen-webui: Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpointsCVE-2026-70490Mediumopen-webui: Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role checkCVE-2026-70489Mediumopen-webui: Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsingCVE-2026-54020Mediumopen-webui: Open WebUI: DNS Rebinding SSRF Bypass

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo