7516 matches found
CVE-2026-70490
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.8 until 0.11.0, the terminal WebSocket route in backend/openwebui/routers/terminals.py authenticated its own first-message JWT and never applied the verified-user role gate that getverifieduser enforces...
CVE-2026-70489 Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.0, automation recurrence parsing in backend/openwebui/utils/automations.py anchored minutely and hourly rules at a fixed date of 2000-01-01 and then walked forward one interval at a time to...
CVE-2026-70483
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, DELETE /api/v1/chats/id cancelled a chat's in-flight tasks before checking whether the caller could delete that chat. Any authenticated user who knew another user's chat id could abort...
CVE-2026-70486
Open WebUI (self-hosted AI platform) versions 0.9.0–0.11.0 contain a Same-Origin/XSS risk in the terminal file-preview iframe: the serveUrl iframe branch granted allow-same-origin and allow-scripts for HTML files from the app origin, enabling an authenticated user with terminal server access to r...
Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs
Summary Open WebUI fetches user-supplied URLs on the server for RAG URL ingestion, URL-to-markdown conversion and web-search content retrieval, and decides whether a destination is allowed by asking whether its IP address is globally routable. That test operates on the literal IPv6 address and do...
CVE-2026-70483
Open WebUI (self-hosted AI platform) contained an authorization bypass in the delete_chat_by_id handler (backend/open_webui/routers/chats.py) serving DELETE /api/v1/chats/{id}. The in-flight task cancellation was placed before ownership and permission checks, so any authenticated user with the de...
CLSA-2026-1785204577 TuxCare security update for 6 packages (1 CVE)
TuxCare rebuilt 6 packages to address 1 CVE. Fixed in 19.2.0-tuxcare.6...
CLSA-2026-1785291242 TuxCare security update for protobufjs (1 CVE)
TuxCare rebuilt protobufjs to address 1 CVE. Fixed in 5.0.0-tuxcare.1...
CLSA-2026-1784943203 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 2.4.3-tuxcare.7...
CLSA-2026-1784856203 TuxCare security update for engine.io (2 CVEs)
TuxCare rebuilt engine.io to address 2 CVEs. Fixed in 1.8.3-tuxcare.1...
CLSA-2026-1784683085 TuxCare security update for jsonwebtoken (1 CVE)
TuxCare rebuilt jsonwebtoken to address 1 CVE. Fixed in 0.3.0-tuxcare.1...
CLSA-2026-1784682983 TuxCare security update for immutable (1 CVE)
TuxCare rebuilt immutable to address 1 CVE. Fixed in 5.0.3-tuxcare.2...
CLSA-2026-1784682834 TuxCare security update for org.apache.commons:commons-configuration2 (1 CVE)
TuxCare rebuilt org.apache.commons:commons-configuration2 to address 1 CVE. Fixed in 2.12.0-tuxcare.1...
CLSA-2026-1784682933 TuxCare security update for org.assertj (1 CVE)
TuxCare rebuilt 4 org.assertj packages to address 1 CVE. Fixed in 3.24.2-tuxcare.1...
CLSA-2026-1784596271 TuxCare security update for jquery (1 CVE)
TuxCare rebuilt jquery to address 1 CVE. Fixed in 3.1.1-tuxcare.1...
CLSA-2026-1784596292 TuxCare security update for js-yaml (1 CVE)
TuxCare rebuilt js-yaml to address 1 CVE. Fixed in 4.1.0-tuxcare.2...
CLSA-2026-1784164093 TuxCare security update for http-proxy-middleware (1 CVE)
TuxCare rebuilt http-proxy-middleware to address 1 CVE. Fixed in 0.17.2-tuxcare.1...
CLSA-2026-1783991065 TuxCare security update for org.apache.kafka (2 CVEs)
TuxCare rebuilt 56 org.apache.kafka packages to address 2 CVEs. Fixed in 3.7.1-tuxcare.1...