3441 matches found
PT-2026-105870
Summary Any authenticated user can move one of their own folders under itself, leaving a loop in their folder tree. The re-parent endpoint performed no check that the new parent was not the folder itself or one of its own subfolders, and the folder tree walks did not track which folders they had...
PT-2026-105869
Summary With the Playwright web loader enabled, Open WebUI checks the address behind a user-submitted URL before allowing the request, then handed the request to the browser to perform. The browser resolved the hostname a second time, on its own, and that answer was never checked. An attacker who...
PT-2026-105878
Summary Open WebUI's OAuth token exchange endpoint issues a session for a provider access token without running the OAuth role management that the normal OAuth login callback runs. A user whose provider roles the login callback would refuse, or would demote, could still obtain a working session a...
PT-2026-105868
Summary Open WebUI's OAuth token exchange endpoint issues a session for a provider access token without applying the email domain allowlist that the normal OAuth login callback enforces. An account whose email domain the login callback would refuse could still obtain a working session through thi...
WS-2026-0094
Open WebUI 0.8.6 through 0.11.3: the terminal proxy /api/v1/terminals/serverid/path in backend/openwebui/routers/terminals.py forwarded any requested path to the Terminals orchestrator with the administrator-configured shared bearer key attached. An ordinary user who has been granted access to a...
hubzoid (>=0.7.15, <=0.9.6) potentially affected by unknown CVE via open-webui (0.11.0)
open-webui PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - hubzoid =0.7.15, =0.9.6 Source cves: unknown CVE Source advisory: MEND:WS-2026-0094...
WS-2026-0092
Open WebUI 0.7.0 through 0.11.3: the community sync-stats modal's verify:chat window message listener src/lib/components/chat/Settings/SyncStatsModal.svelte accepted messages from any origin, inserted the chat id unencoded into an authenticated request path exportSingleChatStats in...
WS-2026-0093
Open WebUI 0.11.1 through 0.11.3: the DOCX attachment preview src/lib/components/common/DocxPreview.svelte rendered uploaded documents with docx-preview defaults, which inline a document-supplied HTML part OOXML altChunk into an unsandboxed same-origin iframe and keep document-supplied link targe...
hubzoid (>=0.7.15, <=0.9.6) potentially affected by unknown CVE via open-webui (0.11.0)
open-webui PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - hubzoid =0.7.15, =0.9.6 Source cves: unknown CVE Source advisory: MEND:WS-2026-0092...
GHSA-HQJ7-PHWP-C3FP vulnerabilities
Vulnerabilities for packages: vllm-omni-cuda-13.0, open-webui, apache-beam-python-3.13-sdk, apache-beam-python-3.11-sdk, apache-beam-python-3.14-sdk, nemo-skills, nemo, apache-beam-python-3.12-sdk, label-studio...
GHSA-8MGP-746C-J5XP vulnerabilities
Vulnerabilities for packages: vllm-omni-cuda-13.0, open-webui, apache-beam-python-3.13-sdk, apache-beam-python-3.11-sdk, apache-beam-python-3.14-sdk, nemo-skills, nemo, apache-beam-python-3.12-sdk, label-studio...
CVE-2026-81726 vulnerabilities
Vulnerabilities for packages: vllm-omni-cuda-13.0, open-webui, apache-beam-python-3.13-sdk, apache-beam-python-3.11-sdk, apache-beam-python-3.14-sdk, nemo-skills, nemo, apache-beam-python-3.12-sdk, label-studio...
CVE-2026-81726 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-HQJ7-PHWP-C3FP vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-8MGP-746C-J5XP vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-GJV8-XP57-G29C vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-86000 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-85999 vulnerabilities
Vulnerabilities for packages: open-webui...