open-webui vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-45672Highopen-webui: Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed CVE-2026-45671Highopen-webui: Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion CVE-2026-45667Mediumopen-webui: Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)CVE-2026-45666Mediumopen-webui: Open WebUI has an Indirect Object Reference (IDOR) in user notes CVE-2026-45665Highopen-webui: Open WebUI has Stored XSS in Banner Component via Improper Sanitization Order CVE-2026-45402Highopen-webui: Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach Endpoints GHSA-3WGJ-C2HG-VM6QHighopen-webui: Open WebUI vulnerable to stored XSS via OAuth picture claim stored as SVG data URI in profile_image_url CVE-2026-45401Highopen-webui: Open WebUI has a SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints (not addressed by CVE-2025-65958)CVE-2026-45400Highopen-webui: Open WebUI has a Server-Side Request Forgery (SSRF) bypass in `validate_url`CVE-2026-45399Highopen-webui: Open WebUI: Low-privilege authenticated users can enumerate and stop global background tasks, causing system-wide chat disruption CVE-2026-45398Highopen-webui: Open WebUI Vulnerable to IDOR: Retrieval API Bypasses Knowledge Base Access Controls CVE-2026-45397Mediumopen-webui: Open WebUI Vulnerable to Unauthenticated RAG Configuration Disclosure CVE-2026-45396Mediumopen-webui: Open WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data Manipulation CVE-2026-45395Highopen-webui: Open WebUI: Missing `workspace.tools` Authorization Check on Tool Update Endpoint Allows Privilege Escalation to Code Execution CVE-2026-45387Mediumopen-webui: Open WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt leakage)CVE-2026-45386Mediumopen-webui: Open WebUI has an IDOR vulnerability in the pin_channel_message API endpoint CVE-2026-45385Mediumopen-webui: Open WebUI has an IDOR vulnerability in the update_message_by_id API endpoint CVE-2026-45365Mediumopen-webui: Open WebUI: Authenticated users can bypass model access control via exposed query parameter [AI-ASSISTED]CVE-2026-45351Mediumopen-webui: Open WebUI Exposes System Prompt to Regular User [Non-Admin]CVE-2026-45350Highopen-webui: Open WebUI's chat completion API allows tool restrictions to be bypassed CVE-2026-45349Highopen-webui: Open WebUI has Broken Access Control for Completions API CVE-2026-45347Mediumopen-webui: Open WebUI vulnerable to blind server side request forgery (SSRF) via the PDF generate function CVE-2026-45346Mediumopen-webui: Open WebUI Has Stored Cross-Site Scripting in SVG Renderer CVE-2026-45345Mediumopen-webui: Open WebUI missing authorization check at the model update function - models from other users can be updated CVE-2026-45338Highopen-webui: Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo