CVE-2026-0765 Open WebUI PIP install_frontmatter_requirements Command Injection Remote Code Execution Vulnerability

Open WebUI PIP installfrontmatterrequirements Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists...

CVE-2026-0765 Open WebUI PIP install_frontmatter_requirements Command Injection Remote Code Execution Vulnerability

Open WebUI PIP installfrontmatterrequirements Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists...

CVE-2026-0765 Open WebUI PIP install_frontmatter_requirements Command Injection Remote Code Execution Vulnerability

Open WebUI PIP installfrontmatterrequirements Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists...

Open WebUI security vulnerabilities

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Open WebUI has a security vulnerability that stems from transmitting sensitive information in plaintext when handling credentials, which may lead to information leakage...

Open WebUI Code Injection Vulnerability

Open WebUI is an open-source, scalable, feature-rich, and user-friendly self-hosted WebUI. Open WebUI has a code injection vulnerability, which stems from the lack of validation for the string provided by users in the loadtoolmodulebyid function. This vulnerability may lead to code injection and...

Open WebUI: Operating System Command Injection Vulnerability

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Open WebUI has a vulnerability related to operating system command injection. This vulnerability stems from the lack of validation for the strings provided by users in the...

CVE-2026-23949 vulnerabilities

Vulnerabilities for packages: airflow, datadog-agent, py3-setuptools, semgrep, kubeflow-katib, kserve, open-webui, py3-cassandra-medusa, superset, pypy-3.11, pypy-3.10, dask-kubernetes, emissary, kubeflow-jupyter-web-app, mlflow...

GHSA-58PV-8J8X-9VJ2 vulnerabilities

Vulnerabilities for packages: airflow, datadog-agent, py3-setuptools, semgrep, kubeflow-katib, kserve, open-webui, py3-cassandra-medusa, superset, pypy-3.11, pypy-3.10, dask-kubernetes, emissary, kubeflow-jupyter-web-app, mlflow...

GHSA-58PV-8J8X-9VJ2 vulnerabilities

Vulnerabilities for packages: localstack, ansible-operator-fips, authentik-fips, ansible-operator, py3.9-setuptools, pypy-3.10, datadog-agent-fips, kubeflow-jupyter-web-app, awx, apache-beam-python-3.11-sdk, opal, authentik, open-webui, airflow, tensorflow-gpu-jupyter,...

CVE-2026-22691 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-22690 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-4XC4-762W-M6CG vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-87HC-H4R5-73F7 vulnerabilities

Vulnerabilities for packages: superset...

CVE-2026-21860 vulnerabilities

Vulnerabilities for packages: superset...

GHSA-4F6G-68PF-7VHV vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-4F6G-68PF-7VHV vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-87HC-H4R5-73F7 vulnerabilities

Vulnerabilities for packages: superset, tensorflow-cpu-jupyter, azure-functions-python-worker...

GHSA-4XC4-762W-M6CG vulnerabilities

Vulnerabilities for packages: open-webui...

PT-2026-1995

Name of the Vulnerable Software and Affected Versions Open WebUI affected versions not specified Description A flaw exists in Open WebUI that allows remote attackers to execute arbitrary code. Authentication is required to exploit this issue. The vulnerability is located within the install...

(0Day) Open WebUI PIP install_frontmatter_requirements Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists within the installfrontmatterrequirements function.The issue results from the lack of proper validation ...