3445 matches found
CVE-2026-59714: Missing Authorization
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 before 0.10.0, any authenticated user can overwrite the content of a message in a channel they do not belong to including private and DM channels by sending a chat completion request with a...
CVE-2026-71852 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-FP3F-MC75-235C vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-FWG2-594C-JP42 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-71870 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-12075 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-XH95-F55M-82FW vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-QVV7-CG9C-W4X3 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-12072 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-6HM5-JGCP-P838 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-12074 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-9XWG-3R6F-JCX2 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-61632 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-67422 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-GM37-52C6-37MW vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-59935 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-59937 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-61632 vulnerabilities
Vulnerabilities for packages: open-webui...