992400 matches found
PT-2026-59345
Summary Open WebUI v0.6.43 contains a vulnerability in its chat completion API, which allows attackers to bypass tool restrictions, potentially enabling unauthorized actions or access. Details In the chat completion API, the parameters tool ids and tool servers are supplied by the user. These...
PT-2026-59350
Vulnerability Type: Information Disclosure / Missing Authentication Severity: Medium Component: backend/open webui/routers/retrieval.py — get status GET / Affected Endpoint: GET /api/v1/retrieval/ Affected Version: Open WebUI main branch — confirmed unpatched through v0.9.2 Authentication Require...
PT-2026-59430
Summary A memory-safety vulnerability in Open Babel's CDXML file format parser caused a NULL pointer dereference when reading a crafted input file. Details The flaw was in OBAtom::GetExplicitValence as called from the CDXML parser. A malformed fragment caused the parser to invoke the method on a...
PT-2026-59416
Summary A memory-safety vulnerability in Open Babel's PQS parser caused an uninitialized pointer dereference when reading a crafted input file. Details The flaw was in the pFormat handling of the PQS reader. A malformed input caused the parser to dereference a format pointer that had never been...
CVE-2026-14453: Improper Control of Generation of Code
This vulnerability is a critical Server-Side Template Injection SSTI in Centreon's centreon-open-tickets module that leads to Remote Code Execution. The messageconfirm field is stored without sanitization and rendered via Smarty with no security policy enabled, allowing any authenticated user, to...
Open WebUI Permission Bypass Privilege Escalation
The vulnerability of the Open WebUI web interface relates to the lack of permission checking for workspace.models.import. Exploiting this vulnerability can allow an attacker, operating remotely, to gain read access, modify data, and enhance their privileges by sending a specially crafted POST...
Open WebUI Information Disclosure
The vulnerability of the Open WebUI artificial intelligence-based web interface is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Open WebUI innerHTML XSS
The vulnerability of the innerHTML component in the Open WebUI-based web interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary JavaScript code...
Open WebUI sanitize_proxy_path function Data Compromise
The vulnerability of the sanitizeproxypath function backend/openwebui/routers/terminals.py in the Open WebUI AI-based web interface is related to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability could allow a malicious actor to compromise the...
NFS Client Buffer Overflow
The vulnerability of the nfs4openandgetstate function in the fs/nfs/nfs4proc.c module, which is part of the NFS client support in Linux kernel, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Open WebUI get_sources_from_items() Unauthenticated Access
The vulnerability of the getsourcesfromitems function in the Open WebUI AI-based web interface is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through the Range Addressing RAG...
Open WebUI Authentication Bypass
The vulnerability of the Open WebUI web interface lies in the lack of authentication when processing the endpoint /api/v1/channels/id/members with a known channel UUID. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
PT-2026-59505
Symbolic-link path traversal CWE-61, CWE-22 in pgAdmin 4 File Manager. check access permission used os.path.abspath, which resolves '..' but does not resolve symbolic links, while the subsequent kernel write follows symlinks. An authenticated user could plant a symbolic link inside their own...
PT-2026-59339
As part of our research on improving our AI pentest, we have uncovered the following issue in Open WebUI. We've manually verified and tided up the report, but you can also find the original agent finding at the bottom of this report. Summary The channel webhook create/update flow accepts arbitrar...
PT-2026-59347
CONFIDENTIAL Vulnerability Disclosure Analysis Documentation --- Vulnerability Details | | Field | Value | |---|-------|-------| | 1 | Discoverer | Taylor Pennington of KoreLogic, Inc. | | 2 | Date Submitted | June 11, 2024 | | 3 | Title | Open WebUI Improper Authorization Control | | 5 | Affecte...
PT-2026-59324
Untrusted Project Bootstrap Code Execution via CLAUDE PROJECT DIR Summary The Cortex MCP server neuro-cortex-memory treats the CLAUDE PROJECT DIR environment variable — automatically set by Claude Code to the currently open project directory — as a trusted Cortex developer checkout. When the open...
PT-2026-59412
Summary A memory-safety vulnerability in Open Babel's CACAO parser caused a NULL pointer dereference when reading a crafted input file. Details The flaw was in CacaoFormat::SetHilderbrandt. A malformed input caused the parser to dereference a NULL pointer while applying the Hilderbrandt...
PT-2026-59369
Summary A user can modify another user's model even if its visibility is set to Private. The finding resulted from a penetration test for a customer. It is suspected that the root cause of the issue lies within the core of Open WebUI, which is why it is being reported as a security issue here...
PT-2026-59425
Summary A memory-safety vulnerability in Open Babel's MOPAC input parser allowed an out-of-bounds write into the translationVectors array when reading Tv translation-vector atoms from a crafted input file. Details The MOPAC IN reader stored Tv-atom translation vectors into a fixed-size...
PT-2026-57583
Name of the Vulnerable Software and Affected Versions Samsung Open Source rlottie affected versions not specified Description An integer overflow or wraparound issue exists in Samsung Open Source rlottie, which can lead to buffer overflows. An integer overflow occurs when an arithmetic operation...