3445 matches found
PT-2026-110713
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.11.4 Description Authenticated users can access disabled model provider backends by providing an explicit backend index. This occurs on Ollama and OpenAI-compatible listing routes, where the index can be passed a...
PT-2026-110703
Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.7.0 through 0.11.3 Description A cross-origin message handling issue exists in the SyncStatsModal component. This allows an external website to steal a signed-in user's session token by sending unvalidated verify:chat...
CVE-2026-109299: Uncontrolled Resource Consumption
Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users with automations permission to stall the instance by submitting unsatisfiable recurrence rules. Attackers can repeatedly send rules like February 30th to the automations create or update...
PT-2026-110716
Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users with automations permission to stall the instance by submitting unsatisfiable recurrence rules. Attackers can repeatedly send rules like February 30th to the automations create or update...
CVE-2026-66007 vulnerabilities
Vulnerabilities for packages: nemo-rl-cuda-13.0, nemo-gym, open-webui...
GHSA-379C-QX7V-6H59 vulnerabilities
Vulnerabilities for packages: nemo-rl-cuda-13.0, nemo-gym, open-webui...
CVE-2026-66007 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-379C-QX7V-6H59 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-104851 vulnerabilities
Vulnerabilities for packages: kserve, open-webui...
GHSA-27VJ-QCQG-25RC vulnerabilities
Vulnerabilities for packages: kserve, open-webui...
CVE-2026-102993 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-102998 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-103000 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-5JQ2-8X83-X246 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-W23X-9JRW-R45C vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-102994 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-102995 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-102999 vulnerabilities
Vulnerabilities for packages: open-webui...