2407 matches found
CVE-2026-0766
Open WebUI loadtoolmodulebyid Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists within the...
CVE-2026-0766 Open WebUI load_tool_module_by_id Command Injection Remote Code Execution Vulnerability
Open WebUI loadtoolmodulebyid Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists within the...
CVE-2026-0765
Open WebUI PIP installfrontmatterrequirements Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists...
CVE-2026-0765 Open WebUI PIP install_frontmatter_requirements Command Injection Remote Code Execution Vulnerability
Open WebUI PIP installfrontmatterrequirements Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists...
CVE-2026-0765 Open WebUI PIP install_frontmatter_requirements Command Injection Remote Code Execution Vulnerability
Open WebUI PIP installfrontmatterrequirements Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists...
Open WebUI: Operating System Command Injection Vulnerability
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Open WebUI has a vulnerability related to operating system command injection. This vulnerability stems from the lack of validation for the strings provided by users in the...
Open WebUI Code Injection Vulnerability
Open WebUI is an open-source, scalable, feature-rich, and user-friendly self-hosted WebUI. Open WebUI has a code injection vulnerability, which stems from the lack of validation for the string provided by users in the loadtoolmodulebyid function. This vulnerability may lead to code injection and...
Open WebUI security vulnerabilities
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Open WebUI has a security vulnerability that stems from transmitting sensitive information in plaintext when handling credentials, which may lead to information leakage...
CVE-2026-23949 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, dask-kubernetes, open-webui, py3-setuptools, pypy-3.10, kubeflow-jupyter-web-app, py3-cassandra-medusa, kserve, semgrep, mlflow, emissary, airflow, superset, datadog-agent, pypy-3.11...
GHSA-58PV-8J8X-9VJ2 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, dask-kubernetes, open-webui, py3-setuptools, pypy-3.10, kubeflow-jupyter-web-app, py3-cassandra-medusa, kserve, semgrep, mlflow, emissary, airflow, superset, datadog-agent, pypy-3.11...
GHSA-58PV-8J8X-9VJ2 vulnerabilities
Vulnerabilities for packages: localstack, datadog-agent-fips, tritonserver-backend-vllm-cuda-12.9, superset, dbt-bigquery, pypy-3.11, kserve, pgadmin4, label-studio, authentik-fips, py3-setuptools, datadog-agent, tensorflow-gpu-jupyter, dask-kubernetes, nemo, tensorflow-cpu-jupyter, emissary,...
CVE-2026-22690 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-22691 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-4F6G-68PF-7VHV vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-4XC4-762W-M6CG vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-87HC-H4R5-73F7 vulnerabilities
Vulnerabilities for packages: superset...