CVE-2026-59937 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-59938 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-61632 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-67422 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-5QJQ-93H5-HRGP vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-GM37-52C6-37MW vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-12061 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-59935 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-55H5-XMCQ-C37V vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-5XF7-4P34-54QR vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-9XWG-3R6F-JCX2 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-G867-7843-WF8Q vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-FG7F-2386-8897 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-12339

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to be overwritten...

CVE-2026-12339

Technical details are not publicly available in the provided documents for CVE-2026-12339. No vendor-confirmed impact, affected products, or remediation are specified here. Monitor for updates and refer to the CVE entry for official details.

CVE-2026-12339 Authenticated Arbitrary File Write Vulnerability in multiple devices

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to be overwritten...

CVE-2026-12339 Authenticated Arbitrary File Write Vulnerability in multiple devices

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to be overwritten...

CVE-2026-12339

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to overwrite on t...

EUVD-2026-55700

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to overwrite on t...

open-webui (0.6.41) potentially affected by CVE-2026-67422 via pymdown-extensions (10.17.2)

pymdown-extensions PYPI version 10.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymdown-extensions and may be impacted: - open-webui 0.6.41 Source cves: CVE-2026-67422 Source advisory: OSV:PYSEC-2026-3654...