2405 matches found
EUVD-2026-75172
Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle...
Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle
Summary Any authenticated user can move one of their own folders under itself, leaving a loop in their folder tree. The re-parent endpoint performed no check that the new parent was not the folder itself or one of its own subfolders, and the folder tree walks did not track which folders they had...
Infinite loop
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Infinite loop through the POST /api/v1/folders/id/update/parent handler, which allows a folder to be moved under itself or one of its subfolders, creating a cycle in the folder hierarchy. An attacker can caus...
EUVD-2026-75173
Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes...
GHSA-WJWR-XFP9-R66P Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes
Summary A user who is demoted from admin by an identity provider keeps admin-level read and write access to every user's notes, over any Socket.IO connection that was already open when the demotion happened. Open WebUI caches the user's role on the socket at connection time, and the two SSO...
Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes
Summary A user who is demoted from admin by an identity provider keeps admin-level read and write access to every user's notes, over any Socket.IO connection that was already open when the demotion happened. Open WebUI caches the user's role on the socket at connection time, and the two SSO...
Incorrect Authorization
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Incorrect Authorization through the caching of user roles on active Socket.IO connections during SSO-driven role changes. An attacker can retain unauthorized read and write access to other users' private note...
CVE-2026-87015
creationtimestamp| type| source ---|---|--- 2026-09-10 22:35:03+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-p78m-89r6-pgf7...
EUVD-2026-75174
Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication...
GHSA-P78M-89R6-PGF7 Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication
Summary When more than one external tool server is reachable in the same request, a tool call to a server configured for bearer authentication can arrive carrying the calling user's Open WebUI session cookies alongside that server's own key. The cookie jar is built per connection, but the callabl...
Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication
Summary When more than one external tool server is reachable in the same request, a tool call to a server configured for bearer authentication can arrive carrying the calling user's Open WebUI session cookies alongside that server's own key. The cookie jar is built per connection, but the callabl...
Insertion of Sensitive Information Into Sent Data
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the tool loading process. An attacker can gain unauthorized access to user session credentials by operating a tool server configured for bearer...
EUVD-2026-75176
Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite...
Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite
Summary On SQLite deployments, the lookup that maps an external identity to a local account does a substring match instead of an exact match. A subject value containing SQL wildcard characters therefore matches accounts the value was never issued for, and the sign-in binds to whichever account th...
Improper Authentication
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Improper Authentication in the getuserbyoauthsub or getuserbyscimexternalid process. An attacker can gain unauthorized access to another user's account, including administrator accounts, by supplying speciall...
GHSA-WPMR-8H3Q-FWJ7 Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite
Summary On SQLite deployments, the lookup that maps an external identity to a local account does a substring match instead of an exact match. A subject value containing SQL wildcard characters therefore matches accounts the value was never issued for, and the sign-in binds to whichever account th...
CVE-2026-87999
creationtimestamp| type| source ---|---|--- 2026-09-10 16:35:21+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-34r3-9m95-vq73...
CVE-2026-87998
creationtimestamp| type| source ---|---|--- 2026-09-10 16:35:19+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-2724-6cpj-gf3v...