7 matches found
CVE-2026-59225
creationtimestamp| type| source ---|---|--- 2026-07-10 05:40:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbgqlpmwx2e 2026-07-24 22:35:49+00:00| seen| https://gist.github.com/alon710/dc8fbe1b073218955707634edeb9a32e...
CVE-2026-59225 Open WebUI: Arena task endpoints can bypass underlying model access controls
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.12 before 0.10.0, an authenticated non-admin user with read access to an arena wrapper model can reach a restricted underlying model through task endpoints such as /api/v1/tasks/moa/completions. The...
CVE-2026-59225 Open WebUI: Arena task endpoints can bypass underlying model access controls
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.12 before 0.10.0, an authenticated non-admin user with read access to an arena wrapper model can reach a restricted underlying model through task endpoints such as /api/v1/tasks/moa/completions. The...
EUVD-2025-59225
Malicious code in ida-ikan12-sluey npm...
CVE-2025-59225 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2025-59225
CVE-2025-59225 is a Microsoft Excel Remote Code Execution vulnerability caused by a use-after-free. The vulnerability allows a local attacker to execute code on a vulnerable system. Various security advisories and update plugins confirm Excel-related fixes in October 2025 releases (MSRC/KB5002794...
