Open WebUI 'LDAP Empty Password' - Authentication Bypass

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP authentication endpoint does not validate that the submitted password is non-empty before performing a Simple Bind against the LDAP server. The LdapForm Pydantic model accep...

Open WebUI < 0.9.5 - Information Disclosure

Open WebUI 0.9.5 contains an information disclosure vulnerability caused by unauthenticated access to GET /api/v1/retrieval/ endpoint, letting remote attackers retrieve live RAG pipeline configuration without authorization, exploit requires no authentication. id: CVE-2026-45397 info: name: Open...

CVE-2024-7808

CVE-2024-7808 💀 $$\colorred 此 \space 漏洞利用 \space 可能 \space 违反 \space 该 \space 法律.$$ $$\colorred\space 你 \space 应该 \space 为 \space 你的 \space 行为 \space 负责.$$ $$\colorred仅 \space 演示 \space 目的.$$ 描述 open-webui 中非管理员用户通过 CSRF 实现 RCE ，该漏洞允许攻击者发送包含内置 JavaScript 的恶意 HTML 文档，该 JavaScript 将上传并执行包含反弹 shell...

enforcement-coverage

Cobertura de Cumplimiento Encuentra rutas de API que llevan un control de autorización más débil que el de sus rutas hermanas. Encontró CVE-2026-45316 en Open WebUI solo a partir del código fuente, sin conocimiento de avisos de seguridad: root@kitploit: MISMATCH POST /notes/id/pin...

CVE-2025-64495-POC

CVE-2025-64495-POC Open WebUI es vulnerable a DOM XSS almacenado a través de prompts cuando 'Insertar Prompt como Texto Enriquecido' está habilitado, resultando en ATO/RCE Resumen La funcionalidad que inserta prompts personalizados en la ventana de chat es vulnerable a DOM XSS cuando 'Insertar...

CVE-2026-84311 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-JP53-MHQP-8XCG vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-23W6-3W8W-8484 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-84309 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-763M-79HH-57F2 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-84310 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-84309 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-23W6-3W8W-8484 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-763M-79HH-57F2 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-84310 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-JP53-MHQP-8XCG vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-84311 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-87013

creationtimestamp| type| source ---|---|--- 2026-09-11 00:35:38+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-8r35-5x5r-hv74 2026-09-11 15:31:47+00:00| seen| https://gist.github.com/alon710/b936d0e8b1b08a24ad813407363272e8...

CVE-2026-87012

creationtimestamp| type| source ---|---|--- 2026-09-11 00:35:36+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-v39v-59xw-j98g 2026-09-11 14:31:53+00:00| seen| https://gist.github.com/alon710/e350315aab7316ce10d2d2056b580adf...

Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange

Summary Open WebUI's OAuth token exchange endpoint issues a session for a provider access token without running the OAuth role management that the normal OAuth login callback runs. A user whose provider roles the login callback would refuse, or would demote, could still obtain a working session a...