2408 matches found
Open WebUI < 0.9.5 - Information Disclosure
Open WebUI 0.9.5 contains an information disclosure vulnerability caused by unauthenticated access to GET /api/v1/retrieval/ endpoint, letting remote attackers retrieve live RAG pipeline configuration without authorization, exploit requires no authentication. id: CVE-2026-45397 info: name: Open...
Open WebUI 'LDAP Empty Password' - Authentication Bypass
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP authentication endpoint does not validate that the submitted password is non-empty before performing a Simple Bind against the LDAP server. The LdapForm Pydantic model accep...
CVE-2024-7808
CVE-2024-7808 💀 $$\colorred ESTE \space EXPLOIT \space PODE \space VIOLAR \space A \space LEI.$$ $$\colorred\space VOCÊ \space É \space RESPONSÁVEL \space POR \space SUAS \space AÇÕES.$$ $$\colorredAPENAS \space PARA \space FINS \space DE \space DEMONSTRAÇÃO.$$ DESCRIÇÃO RCE por Usuários...
CVE-2026-70481
CVE-2026-70481 Open WebUI, affected 0.5.0 through 0.10.2, patched in 0.11.0. Moderate, CVSS 5.4, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L, CWE-284 and CWE-862. In backend/openwebui/routers/channels.py the message update and delete handlers branch on the channel type, and the two branches ask...
GHSA-379C-QX7V-6H59 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-66007 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-66007 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-379C-QX7V-6H59 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-104851 vulnerabilities
Vulnerabilities for packages: open-webui, kserve...
GHSA-27VJ-QCQG-25RC vulnerabilities
Vulnerabilities for packages: open-webui, kserve...
POC_CVE-2024-12537
CVE-2024-12537 Open WebUI Code Format DoS Lab This repository contains a local, isolated reproduction lab and nuclei template candidate for CVE-2024-12537, an unauthenticated denial-of-service vulnerability in Open WebUI's code formatting endpoint. The lab does not send large denial-of-service...
enforcement-coverage
Enforcement Coverage Finds API routes that carry a weaker authorization control than their siblings. It found CVE-2026-45316 in Open WebUI from source alone, with no advisory knowledge: MISMATCH POST /notes/id/pin notes.py:pinnotebyid 3/3 comparable write operations on note require hasaccesswrite...
ai-kubernetes-helm-chart-security
AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...
CVE-2025-64495-POC
CVE-2025-64495-POC Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE Summary The functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prom...
CVE-2026-102996 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-5JQ2-8X83-X246 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-103000 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-FP3H-C4FM-7VVF vulnerabilities
Vulnerabilities for packages: open-webui...