CVE-2024-7990

CVE-2024-7990 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

PT-2025-12175

Name of the Vulnerable Software and Affected Versions open-webui/open-webui version v0.3.8 Description The issue allows an attacker to perform Cross-Site Request Forgery CSRF attacks. This can happen when an unaware user visits a malicious site or through top-level navigation, causing them to...

PT-2025-12195

Name of the Vulnerable Software and Affected Versions open-webui/open-webui versions = 0.3.8 Description A vulnerability allows remote code execution by non-admin users via Cross-Site Request Forgery CSRF. The application uses cookies with the SameSite attribute set to lax for authentication and...

PT-2025-12180

Name of the Vulnerable Software and Affected Versions open-webui/open-webui version 0.3.8 Description A Stored Cross-Site Scripting XSS issue exists in the chat file upload functionality. An attacker can inject malicious content into a file, which, when accessed by a victim through a URL or share...

PT-2025-12182

Name of the Vulnerable Software and Affected Versions open-webui/open-webui version 0.3.8 Description The issue is related to improper access control, allowing an attacker to view admin details without verifying if the attacker is an administrator. This can be exploited by directly calling the...

PT-2025-12211

Name of the Vulnerable Software and Affected Versions open-webui/open-webui version v0.3.10 Description The api/v1/utils/pdf endpoint lacks authentication mechanisms, allowing unauthenticated attackers to access the PDF generation service. This issue can be exploited by sending a POST request wit...

PT-2025-12174

Name of the Vulnerable Software and Affected Versions open-webui version 0.3.8 Description The issue arises from the improper handling of user-supplied filenames in the /models/upload endpoint, specifically due to the usage of file path = f"UPLOAD DIR/file.filename" without proper input validatio...

CVE-2024-8053: Missing Authentication for Critical Function

In version v0.3.10 of open-webui/open-webui, the api/v1/utils/pdf endpoint lacks authentication mechanisms, allowing unauthenticated attackers to access the PDF generation service. This vulnerability can be exploited by sending a POST request with an excessively large payload, potentially leading...

CVE-2024-7983: Allocation of Resources Without Limits or Throttling

In version 0.3.8 of open-webui, an endpoint for converting markdown to HTML is exposed without authentication. A maliciously crafted markdown payload can cause the server to spend excessive time converting it, leading to a denial of service. The server becomes unresponsive to other requests until...

CVE-2024-7044: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability exists in the chat file upload functionality of open-webui/open-webui version 0.3.8. An attacker can inject malicious content into a file, which, when accessed by a victim through a URL or shared chat, executes JavaScript in the victim's browser. Th...

CVE-2024-7043: Missing Authorization

An improper access control vulnerability in open-webui/open-webui v0.3.8 allows attackers to view and delete any files. The application does not verify whether the attacker is an administrator, allowing the attacker to directly call the GET /api/v1/files/ interface to retrieve information on all...

CVE-2024-7035: Cross-Site Request Forgery (CSRF)

In version v0.3.8 of open-webui/open-webui, sensitive actions such as deleting and resetting are performed using the GET method. This vulnerability allows an attacker to perform Cross-Site Request Forgery CSRF attacks, where an unaware user can unintentionally perform sensitive actions by simply...

PT-2025-12150

Name of the Vulnerable Software and Affected Versions open-webui version 0.3.32 fastapi versions prior to 0.115.3 Description The issue arises from the application's use of a vulnerable version of the starlette package, which is a dependency of fastapi. This vulnerability can lead to uncontrolled...

PT-2025-12292

Name of the Vulnerable Software and Affected Versions open-webui/open-webui version 0.3.21 Description A Denial of Service DoS issue exists, affecting multiple endpoints, including "/ollama/models/upload", "/audio/api/v1/transcriptions", and "/rag/api/v1/doc". The application processes multipart...

PT-2025-12201

Name of the Vulnerable Software and Affected Versions open-webui/open-webui version 79778fa Description A vulnerability allows an attacker to cause a Denial of Service DoS by uploading a file with a malformed multipart boundary. By appending a large number of characters to the end of the multipar...

PT-2025-12183

Name of the Vulnerable Software and Affected Versions open-webui/open-webui version 0.3.8 Description A vulnerability allows an attacker with a user-level account to perform a session fixation attack. The session cookie for all users is set with the default SameSite=Lax and does not have the Secu...

PT-2025-12138

Name of the Vulnerable Software and Affected Versions open-webui/open-webui version 0.3.32 Description The absence of authentication mechanisms in open-webui/open-webui allows any unauthenticated attacker to access the api/v1/utils/code/format endpoint. If a malicious actor sends a POST request...

PT-2025-12198

Name of the Vulnerable Software and Affected Versions open-webui/open-webui version 0.3.8 Description The issue concerns a Server-Side Request Forgery SSRF vulnerability. Specifically, the /openai/models endpoint is affected, allowing an attacker to change the OpenAI URL to any URL without checks...

PT-2025-12137

Name of the Vulnerable Software and Affected Versions open-webui/open-webui version 0.3.32 Description The application lacks character length validation on the email and password fields during the sign-in process. This allows users to submit large payloads, potentially leading to a Denial of...

PT-2025-12200

Name of the Vulnerable Software and Affected Versions open-webui/open-webui version 0.3.8 Description A stored cross-site scripting XSS issue exists, allowing an attacker to inject malicious scripts through the /api/v1/models/add endpoint, where the model description field is improperly sanitized...