CVE-2026-45350

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, there is a vulnerability in chat completion API, which allows attackers to bypass tool restrictions, potentially enabling unauthorized actions or access. In the chatcompletion API, t...

CVE-2026-45331

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, validateurl in backend/openwebui/retrieval/web/utils.py calls validators.ipv6ip, private=True, but the validators library does NOT implement the private keyword for IPv6 — the call...

CVE-2026-45338

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a Server-Side Request Forgery SSRF vulnerability exists in processpictureurl in backend/openwebui/utils/oauth.py line 1338. The function fetches arbitrary URLs from OAuth picture...

CVE-2026-44555

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, Open WebUI supports model composition via basemodelid: a user-defined model e.g., "Cheap Assistant" can reference an existing base model e.g., "gpt-4-turbo-restricted" that provides...

CVE-2026-44556

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the /responses endpoint in the OpenAI router accepts any authenticated user and forwards requests directly to upstream LLM providers without enforcing per-model access control. While...

CVE-2026-44554

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the POST /api/v1/retrieval/process/web endpoint accepts a user-supplied collectionname and an overwrite query parameter default: True. It performs no authorization check on whether t...

GHSA-62Q4-447F-WV8H vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-46338 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-46338 vulnerabilities

Vulnerabilities for packages: open-webui...

The vulnerability in the Open WebUI web interface allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability in the Open WebUI web interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Open WebUI web interface, related to deficiencies in the authentication process, allows a perpetrator to gain access to read and modify data.

The vulnerability of the Open WebUI web interface is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain access to read and modify data remotely...

The vulnerability of the update_message_by_id() function in the Open WebUI AI-based web interface allows a hacker to gain access to read, modify, or delete data.

The vulnerability of the updatemessagebyid function in the Open WebUI AI-based web interface relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker to gain access to read, modify, or delete data...

The vulnerability of the DOMPurify.sanitize() function in the Open WebUI AI-based web interface allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the DOMPurify.sanitize function in the Open WebUI AI-based web interface is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Open WebUI web interface, related to deficiencies in the authentication process, allows attackers to circumvent existing security restrictions.

The vulnerability of the Open WebUI web interface, based on artificial intelligence, is related to deficiencies in the authentication process when processing the bypassfilter parameter for endpoints like /openai/chat/completions and /ollama/api/chat. Exploiting this vulnerability allows a malicio...

The vulnerability of the validate_url() function in the Open WebUI AI-based web interface allows a attacker to perform an SSRF attack.

The vulnerability of the validateurl function in the Open WebUI AI-based web interface is related to insufficient validation of requests at the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack remotely...

The vulnerability in the Open WebUI web interface, related to the mechanism for restricting access to API keys, allows attackers to bypass existing security measures and gain unauthorized access to protected information.

The vulnerability in the Open WebUI web interface is related to the mechanism for restricting access to API keys. Exploiting this vulnerability allows a malicious actor to bypass existing security measures and gain unauthorized access to protected information...

The vulnerability of the Open WebUI web interface, based on artificial intelligence, arises from the lack of permission checks. This allows attackers to gain read access, modify data, enhance their privileges, and execute arbitrary code.

The vulnerability of the Open WebUI web interface is related to the lack of permission checking for workspace.tools. Exploiting this vulnerability allows a malicious actor to gain read access, modify data, elevate their privileges, and execute arbitrary code by sending a specially crafted POST...

The vulnerability in the Open WebUI web interface, related to the lack of protective measures for website structures, allows attackers to execute cross-site scripting attacks (XSS).

The vulnerability of the Open WebUI web interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS using a specially created URL address...

The vulnerability of the PDF-generation function in the Open WebUI web interface allows a attacker to perform an SSRF attack.

The vulnerability of the PDF file generation function in the Open WebUI web interface is related to insufficient validation of requests at the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

The vulnerability of the validate_url() function (backend/open_webui/retrieval/web/utils.py) in the Open WebUI AI-based web interface allows a attacker to perform an SSRF attack.

The vulnerability of the validateurl function backend/openwebui/retrieval/web/utils.py in the Open WebUI AI-based web interface is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack remotely...