open-webui vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-44554Highopen-webui: Open WebUI has Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection Overwrite CVE-2026-44558Mediumopen-webui: Open WebUI's Channel Access Grants Bypass filter_allowed_access_grants CVE-2026-44556Highopen-webui: Open WebUI's responses passthrough endpoint lacks access control authorization CVE-2026-44555Highopen-webui: Open WebUI's Base Model Routing Bypasses Access Control via Model Chaining CVE-2026-44552Highopen-webui: Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning CVE-2026-44553Highopen-webui: Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access CVE-2026-44550Mediumopen-webui: Open WebUI's Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts CVE-2026-44551Criticalopen-webui: Open WebUI has an LDAP Empty Password Authentication Bypass CVE-2026-44721Highopen-webui: open-webui Vulnerable to Stored XSS via Model Description CVE-2026-34222Highopen-webui: Open WebUI has Broken Access Control in Tool Valves CVE-2026-29071Lowopen-webui: Open WebUI's Insecure Direct Object Reference (IDOR) allows access to other users' memories CVE-2026-29070Mediumopen-webui: Open WebUI has unauthorized deletion of knowledge files CVE-2026-28788Highopen-webui: Open WebUI's process_files_batch() endpoint missing ownership check, allows unauthorized file overwrite CVE-2026-28786Mediumopen-webui: Open WebUI vulnerable to Path Traversal in `POST /api/v1/audio/transcriptions`CVE-2025-65959Highopen-webui: Open WebUI Vulnerable to Stored DOM XSS via Note 'Download PDF'CVE-2025-65958Highopen-webui: Open WebUI vulnerable to Server-Side Request Forgery (SSRF) via Arbitrary URL Processing in /api/v1/retrieval/process/web CVE-2025-63681Lowopen-webui: open-webui is Vulnerable to Incorrect Access Control CVE-2025-64496Highopen-webui: Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events CVE-2025-64495Highopen-webui: Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE GHSA-5CCF-884P-4JJQHighopen-webui: Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability CVE-2024-8060Highopen-webui: Open WebUI allows Remote Code Execution via Arbitrary File Upload to /audio/api/v1/transcriptions CVE-2024-8053Highopen-webui: Open WebUI lacks authentication for the `api/v1/utils/pdf` endpoint CVE-2024-7983Highopen-webui: Open WebUI denial of service through endpoint for converting markdown CVE-2024-7990Highopen-webui: Open WebUI stored cross-site scripting (XSS) vulnerability CVE-2024-7035Mediumopen-webui: Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF)

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo