3444 matches found
Open WebUI 'LDAP Empty Password' - Authentication Bypass
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP authentication endpoint does not validate that the submitted password is non-empty before performing a Simple Bind against the LDAP server. The LdapForm Pydantic model accep...
Open WebUI < 0.9.5 - Information Disclosure
Open WebUI 0.9.5 contains an information disclosure vulnerability caused by unauthenticated access to GET /api/v1/retrieval/ endpoint, letting remote attackers retrieve live RAG pipeline configuration without authorization, exploit requires no authentication. id: CVE-2026-45397 info: name: Open...
CVE-2024-7808
CVE-2024-7808 💀 $$\colorred THIS \space EXPLOIT \space MAY \space VIOLATE \space THE \space LAW.$$ $$\colorred\space YOU \space ARE \space RESPONSIBLE \space FOR \space YOUR \space ACTIONS.$$ $$\colorredDEMONSTRATION \space PURPOSE \space ONLY.$$ DESCRIPTION RCE by Non-Admin Users via CSRF in...
CVE-2025-64495-POC
CVE-2025-64495-POC Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE Summary The functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prom...
CVE-2026-123817 vulnerabilities
Vulnerabilities for packages: nemo-skills, airflow, lmcache-cuda-12.8, litellm-fips, py3.13-scanner-test-libraries-aiohttp, nemo-gym, kserve-sklearnserver, awx, kserve-lgbserver-fips, open-webui, datahub-ingestion, kserve, commercial-gitlab-cng-ee-fips, metaflow-service, py3-vllm-cuda-12.4,...
CVE-2026-123817 vulnerabilities
Vulnerabilities for packages: kserve, dask-kubernetes, open-webui...
POC_CVE-2024-12537
CVE-2024-12537 Open WebUI Code Format DoS Lab This repository contains a local, isolated reproduction lab and nuclei template candidate for CVE-2024-12537, an unauthenticated denial-of-service vulnerability in Open WebUI's code formatting endpoint. The lab does not send large denial-of-service...
enforcement-coverage
Enforcement Coverage Finds API routes that carry a weaker authorization control than their siblings. It found CVE-2026-45316 in Open WebUI from source alone, with no advisory knowledge: MISMATCH POST /notes/id/pin notes.py:pinnotebyid 3/3 comparable write operations on note require hasaccesswrite...
CVE-2026-70481
CVE-2026-70481 Open WebUI, affected 0.5.0 through 0.10.2, patched in 0.11.0. Moderate, CVSS 5.4, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L, CWE-284 and CWE-862. In backend/openwebui/routers/channels.py the message update and delete handlers branch on the channel type, and the two branches ask...
ai-kubernetes-helm-chart-security
AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...
one-second
One Second: The Open WebUI Windows Master Key knell Timestamp of record archive.org: https://archive.org/details/knell-one-second Open WebUI's Windows installer mints its master secret — WEBUISECRETKEY, the key that signs every session token — from the Windows C library's rand, a linear...
CVE-2026-119284 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-9PG5-8C7X-5HFX vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-119283 vulnerabilities
Vulnerabilities for packages: open-webui, localstack...
GHSA-JPXQ-7H8P-2Q76 vulnerabilities
Vulnerabilities for packages: open-webui, localstack...
GHSA-JPXQ-7H8P-2Q76 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-119283 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-119203 vulnerabilities
Vulnerabilities for packages: open-webui...