991149 matches found
Information Exposure
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Information Exposure via the GET /api/v1/channels/id/members endpoint. An attacker can access sensitive configuration data, including webhook URLs and tool server credentials belonging to other users, by maki...
EUVD-2026-42631
Open WebUI: /api/v1/channels/id/members exposes full user model including sensitive credentials...
Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding
Summary A normal authenticated user can read the content of a message in a private channel they do not belong to. GET /api/v1/channels/id/messages/messageid/thread authorizes the caller against the URL channel, but the underlying thread lookup loads the thread parent by id and returns it without...
GHSA-73X5-H92W-XC2J Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding
Summary A normal authenticated user can read the content of a message in a private channel they do not belong to. GET /api/v1/channels/id/messages/messageid/thread authorizes the caller against the URL channel, but the underlying thread lookup loads the thread parent by id and returns it without...
Authorization Bypass Through User-Controlled Key
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the getmessagesbyparentid process. An attacker can access the content, channel ID, and author metadata of messages in private channels they do not belong t...
EUVD-2026-42630
Open WebUI: Private channel messages can be disclosed through cross-channel thread parentid binding...
openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59215 via open-webui (0.6.0)
open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59215 Source advisory: SNYK:PYTHON-OPENWEBUI-18307443...
openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59215 via open-webui (0.6.0)
open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59215 Source advisory: GHSA-73X5-H92W-XC2J...
openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59215 via open-webui (0.6.0)
open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59215 Source advisory: OSV:GHSA-73X5-H92W-XC2J...
EUVD-2026-42629
Open WebUI: Cross-user model-list exposure via static cache key in getallmodels aiocache key= vs keybuilder= misuse...
Use of Cache Containing Sensitive Information
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information in the getallmodels process due to improper cache key configuration, which causes permission-filtered model lists to be shared across users. An attacker can acces...
EUVD-2026-42628
Open WebUI: Upload metadata.knowledgeid bypasses the knowledge-base write-access check read-only users can add files to KB...
Incorrect Authorization
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Incorrect Authorization in the processuploadedfile process. An attacker can modify the file membership of a knowledge base without proper authorization by supplying a crafted metadata.knowledgeid value during...
Open WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can add files to KB)
Open WebUI upload metadata can add files to knowledge bases without write permission Summary Open WebUI's file upload background processing trusts the client-supplied metadata.knowledgeid value and inserts a knowledgefile association before validating that the uploading user has write access to t...
openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59217 via open-webui (0.6.0)
open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59217 Source advisory: OSV:GHSA-7R7X-GJVR-448G...
openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59217 via open-webui (0.6.0)
open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59217 Source advisory: SNYK:PYTHON-OPENWEBUI-18307439...
openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59217 via open-webui (0.6.0)
open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59217 Source advisory: GHSA-7R7X-GJVR-448G...
EUVD-2026-42627
Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller sessionid...
openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59216 via open-webui (0.6.0)
open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59216 Source advisory: OSV:GHSA-74H3-CXQ7-VC5Q...
openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59216 via open-webui (0.6.0)
open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59216 Source advisory: SNYK:PYTHON-OPENWEBUI-18307442...