109 matches found
CVE-2026-42215 vulnerabilities
Vulnerabilities for packages: mlflow-fips, awx, opal, datahub-ingestion-fips, open-webui, checkov, mlflow...
CVE-2026-41314 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-44569
creationtimestamp| type| source ---|---|--- 2026-05-05 20:20:01+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-jxwr-g6r6-j3fx...
CVE-2026-44566
creationtimestamp| type| source ---|---|--- 2026-05-05 15:44:20+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-9pgh-j74g-qj6m...
GHSA-FV5P-P927-QMXR vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-FV5P-P927-QMXR vulnerabilities
Vulnerabilities for packages: open-webui, py3-langchain-text-splitters...
GHSA-Q5F5-3GJM-7MFM vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-W828-4QHX-VXX3 vulnerabilities
Vulnerabilities for packages: open-webui, py3-vllm-cuda-12.4...
CVE-2026-33699 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-28786
creationtimestamp| type| source ---|---|--- 2026-03-26 23:29:07+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-vvxm-vxmr-624h...
CVE-2026-29071
creationtimestamp| type| source ---|---|--- 2026-03-26 23:27:51+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-w9f8-gxf9-rhvw...
GHSA-HQMH-PPP3-XVM7 vulnerabilities
Vulnerabilities for packages: open-webui...
PT-2026-41179
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.0 Description An issue exists where a user can continue the conversation of another user if the target user's Chat ID is known. This occurs because the system fails to verify if the Chat ID matches the user who...
CVE-2025-15603
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The vendor explains: "The 't0p-s3cr3t' default was dead code on every supported startup path: start.sh...
PT-2026-24109
A security vulnerability has been detected in open-webui up to 0.6.16. Affected is an unknown function of the file backend/start windows.bat of the component JWT Key Handler. Such manipulation of the argument WEBUI SECRET KEY leads to insufficiently random values. It is possible to launch the...
GHSA-2RW7-X74F-JG35 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-2G6R-C272-W58R vulnerabilities
Vulnerabilities for packages: open-webui...