6082 matches found
CVE-2026-87997
Open WebUI (self-hosted AI platform) versions 0.10.0 through 0.11.1 contain an access-control bypass in POST /api/chat/completions and POST /api/v1/chat/completions (backend/open_webui/main.py). A client-supplied folder_id was copied into a new chat without the folder write-access check enforced ...
CVE-2026-87997 Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /api/chat/completions and POST /api/v1/chat/completions in backend/openwebui/main.py copied a client-supplied folderid into a new chat without applying the folder write-access chec...
CVE-2026-87997 Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /api/chat/completions and POST /api/v1/chat/completions in backend/openwebui/main.py copied a client-supplied folderid into a new chat without applying the folder write-access chec...
CVE-2026-87013
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /api/v1/folders/id/update/parent allowed a user to place a folder under itself or one of its descendants, while the folder tree walks used by DELETE /api/v1/folders/id and POST...
CVE-2026-87013 Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /api/v1/folders/id/update/parent allowed a user to place a folder under itself or one of its descendants, while the folder tree walks used by DELETE /api/v1/folders/id and POST...
CVE-2026-87013 Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /api/v1/folders/id/update/parent allowed a user to place a folder under itself or one of its descendants, while the folder tree walks used by DELETE /api/v1/folders/id and POST...
CVE-2026-87013
Open WebUI versions 0.10.0 through 0.11.1 contain a denial-of-service vulnerability in the folder tree functionality. The POST /api/v1/folders/{id}/update/parent endpoint allowed an authenticated user to place a folder under itself or one of its descendants, creating a parent cycle . Because the ...
CVE-2026-87013 Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /api/v1/folders/id/update/parent allowed a user to place a folder under itself or one of its descendants, while the folder tree walks used by DELETE /api/v1/folders/id and POST...
PT-2026-89174
Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.10.0 through 0.11.0 Description An issue exists in the chat-completions handler within backend/open webui/main.py where the system fails to verify if a user has write access to a specified folder when creating a new chat...
CVE-2026-87013: Loop with Unreachable Exit Condition
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /api/v1/folders/id/update/parent allowed a user to place a folder under itself or one of its descendants, while the folder tree walks used by DELETE /api/v1/folders/id and POST...
CVE-2026-71336
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network...
CVE-2026-70019
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...
CVE-2026-69560
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69496
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network...
CVE-2026-69445
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Compressed Folder allows an authorized attacker to elevate privileges locally...
EUVD-2026-73703
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69560
CVE-2026-69560 is a use-after-free vulnerability in the Windows Work Folder Service that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting a high attack complexity and low privileges requir...
EUVD-2026-73508
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Compressed Folder allows an authorized attacker to elevate privileges locally...
CVE-2026-69445
CVE-2026-69445 is a local privilege escalation vulnerability in Windows Compressed Folder caused by an improper limitation of a pathname to a restricted directory (path traversal ). An authorized attacker with low privileges can exploit this locally without user interaction to achieve high impact...