3445 matches found
PT-2026-89168
Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.7.0 through 0.11.0 Description The built-in knowledge search tool fails to properly restrict access to knowledge bases when using specific vector backends. While the tool identifies which knowledge bases a user is permitt...
PT-2026-89174
Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.10.0 through 0.11.0 Description An issue exists in the chat-completions handler within backend/open webui/main.py where the system fails to verify if a user has write access to a specified folder when creating a new chat...
PT-2026-89162
Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.6.27 through 0.11.0 Description An issue exists in the tool loading routine within backend/open webui/utils/tools.py where a cookie jar is captured from the enclosing connection loop instead of being bound to each externa...
CVE-2026-87012: Improper Check for Unusual or Exceptional Conditions
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, backend/openwebui/models/calendar.py stored the calendar event meta.alertminutes value without type validation and the shared upcoming-event scheduler compared that value numerically. An...
PT-2026-89167
Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.6.41 through 0.11.0 Description On SQLite deployments, the lookup process mapping an external identity to a local account performs a substring match instead of an exact match. This occurs because the contains operator on...
CVE-2026-9856 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-XRQW-3RRV-VX5W vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-71428 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-4MVJ-M6J5-PMF7 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-CV22-G7MW-8V73 vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
CVE-2026-78680 vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
GHSA-5GH2-94QG-QPPQ vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
GHSA-HQV3-XM29-P9HQ vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
GHSA-PF76-Q698-37V8 vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
GHSA-VP2X-QP44-57V7 vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
GHSA-WW6M-CW3F-Q94G vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
CVE-2026-12876 vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
CVE-2026-72818 vulnerabilities
Vulnerabilities for packages: nemo, open-webui...