CVE-2026-66393 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, py3-nltk, open-webui, apache-beam-python-3.12-sdk, apache-beam-python-3.13-sdk, label-studio, kubeflow-pipelines-visualization-server, nemo...

GHSA-CV2G-M8RR-888C vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, py3-nltk, open-webui, apache-beam-python-3.12-sdk, apache-beam-python-3.13-sdk, label-studio, kubeflow-pipelines-visualization-server, nemo...

GHSA-CV2G-M8RR-888C vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-nltk, open-webui...

CVE-2026-66393 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-nltk, open-webui...

GHSA-FFG3-P8FM-MJX2 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-55830 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-FFG3-P8FM-MJX2 vulnerabilities

Vulnerabilities for packages: litellm, open-webui...

CVE-2026-55830 vulnerabilities

Vulnerabilities for packages: litellm, open-webui...

PT-2026-89178

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.5 through 0.11.0 Description An authenticated user can perform a Server-Side Request Forgery SSRF attack when the AIOHTTP CLIENT ALLOW REDIRECTS variable is set to true. The platform fails to reapply the WEB FETCH FILTE...

PT-2026-89179

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.5.0 through 0.11.0 Description A flaw exists in the message-chain reconstruction helper located in backend/open webui/utils/misc.py. The system reconstructs chat history by map key but tracks visited entries using an...

aurapro-ui (>=3.1.0, <=3.9.3), aurapro-webui (>=3.9.11, <=3.10.5) +15 more potentially affected by CVE-2026-55830 via restrictedpython (>=8.0.0, <=8.2.0)

restrictedpython PYPI version =8.0.0, =3.1.0, =3.9.11, =0.167.1, =0.0.44a26, =0.12.0, =0.2.1, =0.7.15, =0.5.17, =10.0.9, =0.166.0, =0.167.0 - pycurity 0.0.1 - pytest-canvas 0.1.0 and more Source cves: CVE-2026-55830 Source advisory: OSV:GHSA-FFG3-P8FM-MJX2...

aurapro-ui (>=3.1.0, <=3.9.3), aurapro-webui (>=3.9.11, <=3.10.5) +15 more potentially affected by CVE-2026-55830 via restrictedpython (>=8.0.0, <=8.2.0)

restrictedpython PYPI version =8.0.0, =3.1.0, =3.9.11, =0.167.1, =0.0.44a26, =0.12.0, =0.2.1, =0.7.15, =0.5.17, =10.0.9, =0.166.0, =0.167.0 - pycurity 0.0.1 - pytest-canvas 0.1.0 and more Source cves: CVE-2026-55830 Source advisory: GHSA-FFG3-P8FM-MJX2...

PT-2026-89158

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.0 through 0.11.0 Description An asymmetric resource consumption issue exists in the OIDC back-channel logout handler. When the ENABLE OAUTH BACKCHANNEL LOGOUT setting is enabled and an OIDC provider is configured, the...

CVE-2026-59714

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 before 0.10.0, any authenticated user can overwrite the content of a message in a channel they do not belong to including private and DM channels by sending a chat completion request with a...

CVE-2026-59714

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 before 0.10.0, any authenticated user can overwrite the content of a message in a channel they do not belong to including private and DM channels by sending a chat completion request with a...

EUVD-2026-58246

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 before 0.10.0, any authenticated user can overwrite the content of a message in a channel they do not belong to including private and DM channels by sending a chat completion request with a...

CVE-2026-59714

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 before 0.10.0, any authenticated user can overwrite the content of a message in a channel they do not belong to including private and DM channels by sending a chat completion request with a...

CVE-2026-59714 Open WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel message_ids)

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 before 0.10.0, any authenticated user can overwrite the content of a message in a channel they do not belong to including private and DM channels by sending a chat completion request with a...

CVE-2026-59714

CVE-2026-59714 describes a cross-channel message overwrite vulnerability in Open WebUI exposed by the chat-completions path. From v0.9.5 to before v0.10.0, an authenticated user could overwrite a message in a channel they do not belong to by using a channel: chat_id with a caller-supplied message...

CVE-2026-59714 Open WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel message_ids)

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 before 0.10.0, any authenticated user can overwrite the content of a message in a channel they do not belong to including private and DM channels by sending a chat completion request with a...