CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1780 matches found

Nuclei•added 2026/09/19 2:05 a.m.•40 views

Open WebUI < 0.9.5 - Information Disclosure

Open WebUI 0.9.5 contains an information disclosure vulnerability caused by unauthenticated access to GET /api/v1/retrieval/ endpoint, letting remote attackers retrieve live RAG pipeline configuration without authorization, exploit requires no authentication. id: CVE-2026-45397 info: name: Open...

5.3CVSS6AI score0.0075EPSS

SaveExploits1References3

Nuclei•added 2026/09/19 2:05 a.m.•43 views

Open WebUI 'LDAP Empty Password' - Authentication Bypass

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP authentication endpoint does not validate that the submitted password is non-empty before performing a Simple Bind against the LDAP server. The LdapForm Pydantic model accep...

9.1CVSS8AI score0.01461EPSS

SaveExploits1References2

Kitploit•added 2026/09/18 8:54 p.m.•8 views

CVE-2024-7808

CVE-2024-7808 💀 $$\colorred ESTE \space EXPLOIT \space PUEDE \space VIOLAR \space LA \space LEY.$$ $$\colorred\space USTED \space ES \space RESPONSABLE \space DE \space SUS \space ACCIONES.$$ $$\colorredSOLO \space CON \space FINES \space DE \space DEMOSTRACIÓN.$$ DESCRIPCIÓN RCE por usuarios no...

9.8CVSS7.4AI score0.01235EPSS

SaveExploits2

BDU FSTEC•added 2026/09/18 12:00 a.m.•7 views

The vulnerability in the Open WebUI web interface, related to insufficient validation of requests on the server side, allows a hacker to perform an SSRF attack.

The vulnerability of the Open WebUI web interface related to insufficient validation of requests on the server side when processing the AIOHTTPCLIENTALLOWREDIRECTS parameter. Exploiting this vulnerability allows a remote attacker to perform an SSRF attack...

5CVSS0.00273EPSS

SaveExploits1References2Affected Software1

BDU FSTEC•added 2026/09/18 12:00 a.m.•5 views

The vulnerability of the `metaalert_minutes` component in the `backend/open_webui/models/calendar.py` file of the Open WebUI AI-based web interface allows a attacker to compromise the accessibility of protected information.

The vulnerability of the metaalertminutes component in the backend/openwebui/models/calendar.py file of the Open WebUI AI-based web interface is related to incorrect validation of the specified data type. Exploiting this vulnerability could allow an attacker to compromise the accessibility of...

4.3CVSS0.00279EPSS

SaveExploits1References2Affected Software1

BDU FSTEC•added 2026/09/18 12:00 a.m.•4 views

The vulnerabilities in the backend files open_webui/routers/auths.py, backend/open_webui/utils/oauth.py, and backend/open_webui/socket/main.py of the Open WebUI artificial intelligence-based web interface allow a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability in the web interface based on artificial intelligence, namely backend/openwebui/routers/auths.py, backend/openwebui/utils/oauth.py, and backend/openwebui/socket/main.py, is related to incorrect session expiration times. Exploiting this vulnerability could allow a malicious actor...

4.3CVSS0.00287EPSS

SaveExploits1References2Affected Software1

BDU FSTEC•added 2026/09/18 12:00 a.m.•4 views

The vulnerability in the backend/open_webui/utils/misc.py file of the Open WebUI artificial intelligence-based web interface allows a attacker to compromise the accessibility of protected information.

The vulnerability in the backend/openwebui/utils/misc.py file of the Open WebUI artificial intelligence-based web interface is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of...

6.8CVSS0.00325EPSS

SaveExploits1References2Affected Software1

Kitploit•added 2026/09/17 1:35 p.m.•10 views

CVE-2026-70481

CVE-2026-70481 Open WebUI 受影响版本为 0.5.0 至 0.10.2，已在 0.11.0 中修复。中危，CVSS 5.4，CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L，CWE-284 和 CWE-862。在 backend/openwebui/routers/channels.py 中，消息更新和删除处理程序根据频道类型进行分支，而这两个分支提出的问题不同。群组和私信频道仅限作者本人操作。 root@kitploit: if channel.type in 'group', 'dm': if not await...

5.4CVSS6AI score0.00299EPSS

SaveExploits1References2

Kitploit•added 2026/09/17 12:40 a.m.•10 views

POC_CVE-2024-12537

CVE-2024-12537 Open WebUI 代码格式拒绝服务实验环境此仓库包含针对 CVE-2024-12537 的本地隔离复现实验环境和 nuclei 模板候选，该漏洞是 Open WebUI 代码格式化端点中的一个未认证拒绝服务漏洞。该实验环境不发送大量拒绝服务载荷。它通过 Open WebUI 的未认证 /api/version 指纹端点以及向 /api/v1/utils/code/format 发送最小化 "code":"x" 请求来验证 nuclei 检测逻辑，然后比较漏洞版本与已修复/较新版本。摘要产品：open-webui/open-webui...

7.4AI score0.00886EPSS

SaveExploits1References1

Kitploit•added 2026/09/14 5:21 p.m.•8 views

enforcement-coverage

强制执行覆盖查找携带比同级路由更弱的授权控制的 API 路由。它仅凭源码就在 Open WebUI 中发现了 CVE-2026-45316，无需任何安全公告信息： root@kitploit: MISMATCH POST /notes/id/pin notes.py:pinnotebyid 3/3 comparable write operations on note require hasaccesswrite; this route requires only hasaccessread POST /notes/id/update hasaccesswrite POST...

3.5CVSS5.8AI score0.00218EPSS

SaveExploits1

Kitploit•added 2026/09/14 7:13 a.m.•10 views

CVE-2025-64495-POC

CVE-2025-64495-POC Open WebUI 在启用“以富文本方式插入提示”时，存在通过提示触发的存储型 DOM XSS 漏洞，可导致账户接管（ATO）或远程代码执行（RCE）摘要当“以富文本方式插入提示”功能启用时，将自定义提示插入聊天窗口的功能容易受到 DOM XSS 攻击，因为提示内容被直接赋值给 DOM sink .innerHtml 而未经过净化。任何拥有创建提示权限的用户都可以利用此漏洞植入载荷，其他用户如果执行对应的 / 命令来插入该提示，就会触发该载荷。详情受影响的代码行位于：...

8.7CVSS8AI score0.0046EPSS

SaveExploits2