CVE-2026-104250 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-V5MQ-3XHG-98M9 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-59951 vulnerabilities

Vulnerabilities for packages: open-webui, nemo-rl-cuda-13.0, nemo-gym, semgrep...

GHSA-84M7-P3X7-PCFV vulnerabilities

Vulnerabilities for packages: open-webui, nemo-rl-cuda-13.0, nemo-gym, semgrep...

CVE-2026-59951 vulnerabilities

Vulnerabilities for packages: semgrep, open-webui...

GHSA-84M7-P3X7-PCFV vulnerabilities

Vulnerabilities for packages: semgrep, open-webui...

EUVD-2026-98155

Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/serverid/path to list or stop other...

CVE-2026-109572

Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/serverid/path to list or stop other...

CVE-2026-109572 Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy

Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/serverid/path to list or stop other...

CVE-2026-109572 Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy

Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/serverid/path to list or stop other...

CVE-2026-109572

Open WebUI versions 0.8.6 before 0.11.4 are vulnerable to a privilege escalation vulnerability within the terminal proxy . This flaw allows authenticated users to bypass authorization and access the Terminals administrator API using a shared key. By sending requests through the /api/v1/terminals/...

CVE-2026-109572 Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy

Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/serverid/path to list or stop other...

CVE-2026-109300

Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scripting vulnerability in its Markdown renderer, which treats user-authored tool-call details blocks as tool output and mounts their embeds attribute in script-enabled iframes. Authenticated users can post crafted channel messages...

CVE-2026-109296

Open WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to reach disabled model provider backends by supplying an explicit backend index. Attackers can pass the index as a path segment or query parameter on Ollama and OpenAI-compatible listing route...

CVE-2026-109297

Open WebUI 0.11.0 before 0.11.4 contains a denial of service vulnerability in the automation recurrence-rule validator, whose sub-daily frequency guard parses rule text more strictly than the calendar library that executes it. Users permitted to create automations can submit whitespace-folded rul...

CVE-2026-109298

Open WebUI 0.11.0 before 0.11.4 compiles user-chosen grep patterns for its knowledge and chat file search tools with a regex engine that expands nested counted repetition unbounded at compile time and caches the result. Authenticated users can have the model call grepknowledgefiles with short...

CVE-2026-109299

Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users with automations permission to stall the instance by submitting unsatisfiable recurrence rules. Attackers can repeatedly send rules like February 30th to the automations create or update...

CVE-2026-109289

Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal commands through an already open terminal WebSocket. Because the terminal proxy route in terminals.py checks access only on the first message, deactivated...

CVE-2026-109292

Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections. Operators of OpenAI-compatible connections, OpenAPI tool servers or terminal...

CVE-2026-109293

Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only. Attackers can request GET /api/v1/tools/export to retrieve the full Python source of...