4667 matches found
CVE-2026-84309 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-JP53-MHQP-8XCG vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-84310 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-763M-79HH-57F2 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-84309 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-84310 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-23W6-3W8W-8484 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-763M-79HH-57F2 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-84311 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-JP53-MHQP-8XCG vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-87013
creationtimestamp| type| source ---|---|--- 2026-09-11 00:35:38+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-8r35-5x5r-hv74 2026-09-11 15:31:47+00:00| seen| https://gist.github.com/alon710/b936d0e8b1b08a24ad813407363272e8...
CVE-2026-87012
creationtimestamp| type| source ---|---|--- 2026-09-11 00:35:36+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-v39v-59xw-j98g 2026-09-11 14:31:53+00:00| seen| https://gist.github.com/alon710/e350315aab7316ce10d2d2056b580adf...
ROS-20260911-73-0031
The vulnerability of the WebUI components in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...
Incorrect Authorization
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Incorrect Authorization via the OAuth token exchange process. An attacker can retain unauthorized access to roles, including administrative privileges, by exchanging a valid provider access token even after t...
Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange
Summary Open WebUI's OAuth token exchange endpoint issues a session for a provider access token without running the OAuth role management that the normal OAuth login callback runs. A user whose provider roles the login callback would refuse, or would demote, could still obtain a working session a...
GHSA-WVM9-9G5J-623F Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange
Summary Open WebUI's OAuth token exchange endpoint issues a session for a provider access token without running the OAuth role management that the normal OAuth login callback runs. A user whose provider roles the login callback would refuse, or would demote, could still obtain a working session a...
EUVD-2026-75170
Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout...
Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout
Summary The OIDC back-channel logout endpoint is unauthenticated by design, because the identity provider calls it without a browser session. Before checking whether the submitted logout token was genuine, the handler fetched the provider's discovery document and its signing keys over the network...
GHSA-3G9Q-V48F-HH9W Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout
Summary The OIDC back-channel logout endpoint is unauthenticated by design, because the identity provider calls it without a browser session. Before checking whether the submitted logout token was genuine, the handler fetched the provider's discovery document and its signing keys over the network...
Allocation of Resources Without Limits or Throttling
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the POST /oauth/backchannel-logout process in the OIDC back-channel logout handler when unauthenticated requests trigger repeated network fetches f...