PYSEC-2026-3879 Open WebUI: Any authenticated user can hang the server via a cyclic chat message history

Summary Chat histories are stored as an unvalidated JSON object. The walk that reconstructs a chat's message chain detected repeats using each message's own id field while moving through the history by map key, so a message that simply omitted id was never recorded as visited. A history whose...

Open WebUI: Any authenticated user can hang the server via a cyclic chat message history

SummaryChat histories are stored as an unvalidated JSON object. The walk that reconstructs a chat's message chain detected repeats using each message's own id field while moving through the history by map key, so a message that simply omitted id was never recorded as visited. A history whose...

GHSA-JQHH-CJMQ-VMV6 Open WebUI: Any authenticated user can hang the server via a cyclic chat message history

Summary Chat histories are stored as an unvalidated JSON object. The walk that reconstructs a chat's message chain detected repeats using each message's own id field while moving through the history by map key, so a message that simply omitted id was never recorded as visited. A history whose...

CVE-2026-88002

Open WebUI (self-hosted AI platform), versions 0.5.0 through 0.11.1 , is affected by a denial-of-service vulnerability in the message-chain reconstruction helper in backend/open_webui/utils/misc.py. The helper advanced through chat history by map key but tracked visited entries using each message...

CVE-2026-88002 Open WebUI: Any authenticated user can hang the server via a cyclic chat message history

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.1, the message-chain reconstruction helper in backend/openwebui/utils/misc.py advanced through a chat history by map key but tracked visited entries using each message body's optional id...

CVE-2026-88002 Open WebUI: Any authenticated user can hang the server via a cyclic chat message history

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.1, the message-chain reconstruction helper in backend/openwebui/utils/misc.py advanced through a chat history by map key but tracked visited entries using each message body's optional id...