Open WebUI security vulnerabilities

Open WebUI is an extensible, feature-rich, user-friendly self-hosted WebUI from Open WebUI open source. A security vulnerability exists in Open WebUI version v0.3.8, which stems from a mismanagement of permissions that allows an administrator to delete other administrators via the API...

Open WebUI path traversal vulnerability

Open WebUI is an extensible, feature-rich, user-friendly self-hosted WebUI from Open WebUI open source. A path traversal vulnerability exists in Open WebUI version 0.3.8, which stems from improper handling of filenames in the /models/upload endpoint, which could lead to arbitrary file writes...

Open WebUI security vulnerabilities

Open WebUI is an extensible, feature-rich, user-friendly self-hosted WebUI from Open WebUI open source. A security vulnerability exists in Open WebUI version 0.3.8, which stems from an improperly handled file path in the downloadmodel endpoint, which could lead to arbitrary file writes...

Open WebUI Cross-Site Request Forgery Vulnerability

Open WebUI is an extensible, feature-rich, user-friendly self-hosted WebUI from Open WebUI open source. A cross-site request forgery vulnerability exists in Open WebUI version v0.3.8, which stems from the use of the GET method for sensitive operations and could lead to a cross-site request forger...

Number withdrawal

Open WebUI is an extensible, feature-rich, user-friendly self-hosted WebUI from Open WebUI Open Source. This CVE number has been withdrawn...

Open WebUI security vulnerabilities

Open WebUI is an extensible, feature-rich, user-friendly self-hosted WebUI from Open WebUI Open Source. A security vulnerability exists in Open WebUI version 0.3.32, which stems from an unverified authentication mechanism and could lead to a denial of service attack...

Open WebUI Resource Management Error Vulnerability

Open WebUI is an extensible, feature-rich, user-friendly self-hosted WebUI from Open WebUI open source. A resource management error vulnerability exists in Open WebUI version 0.3.32, which stems from an unvalidated character length and could lead to a denial of service attack...

Open WebUI Cross-Site Script Vulnerability

Open WebUI is an extensible, feature-rich, user-friendly self-hosted WebUI from Open WebUI open source. A cross-site scripting vulnerability exists in Open WebUI version 0.3.8 and earlier. An attacker can exploit the vulnerability to elevate privileges...

PT-2025-12202

Name of the Vulnerable Software and Affected Versions open-webui/open-webui versions = 0.3.8 Description An XSS issue exists, specifically in the function that constructs the HTML for tooltips, allowing attackers to perform operations with the victim's privileges. This includes stealing chat...

CVE-2024-8017: Improper Neutralization of Input During Web Page Generation

An XSS vulnerability exists in open-webui/open-webui versions = 0.3.8, specifically in the function that constructs the HTML for tooltips. This vulnerability allows attackers to perform operations with the victim's privileges, such as stealing chat history, deleting chats, and escalating their ow...

PT-2026-41177

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.5.11 Description A blind server side request forgery SSRF exists in the PDF generate function. User inputs are interpreted as HTML and embedded into the PDF. While scripts and certain dangerous tags like iFrame a...

Open WebUI SSRF Vulnerability

Open WebUI is a scalable, feature-rich, user-friendly self-hosted web user interface designed to operate completely offline. Open WebUI suffers from an SSRF vulnerability that can be exploited by an attacker to potentially compromise the confidentiality, availability, and integrity of the system...

Insecure Direct Object Reference (IDOR)

Open-webui/open-webui is vulnerable to Insecure Direct Object Reference IDOR. The vulnerability is caused by insufficient access controls in the API, which fail to validate user permissions, allowing unauthorized users to manipulate restricted data...

Information Disclosure

Open-webui is vulnerable to an Information Disclosure. The vulnerability is due to the embedding model update feature under admin settings, which allows an attacker to enumerate file names and traverse directories by observing error messages related to file existence and configuration...

Arbitrary File Write And Delete

open-webui is vulnerable to Arbitrary File write and delete. The vulnerability is due to unsanitized file.filename concatenation with CACHEDIR, allowing attackers to overwrite and delete system files...

CVE-2024-7049

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Exposure of Data Element to Wrong Session

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session due to the improper handling of user roles during the login process. An attacker can gain unauthorized access and perform actions without administrative approval...

CVE-2024-7049

...

CVE-2024-7049

In version v0.3.8 of open-webui/open-webui , a vulnerability exists where a token is returned when a user with a pending role logs in. This flaw allows the user to perform actions without administrative confirmation, effectively bypassing the intended approval process . To remediate this, users s...

CVE-2024-7049 Exposure of Token in open-webui/open-webui

In version v0.3.8 of open-webui/open-webui, a vulnerability exists where a token is returned when a user with a pending role logs in. This allows the user to perform actions without admin confirmation, bypassing the intended approval process...