4667 matches found
CVE-2025-64495-POC
CVE-2025-64495-POC Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE Summary The functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prom...
Hermes WebUI < 0.51.788 - Remote Code Execution
Hermes WebUI 0.51.788 contains an unauthenticated remote code execution caused by improper access control in embedded terminal API endpoints, letting remote attackers execute arbitrary shell commands without credentials. id: CVE-2026-58123 info: name: Hermes WebUI 0.51.788 - Remote Code Execution...
CVE-2026-102995 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-102998 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-PHP9-FJ8V-98FJ vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-102993 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-102994 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-102997 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-5JQ2-8X83-X246 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-G9CG-PRRW-2R8Q vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-JW7Q-GVRG-4VJ3 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-QV6H-RV94-W285 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-V247-6F48-MGCJ vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-W23X-9JRW-R45C vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-FP3H-C4FM-7VVF vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-102996 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-102999 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-103000 vulnerabilities
Vulnerabilities for packages: open-webui...
