991149 matches found
openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59216 via open-webui (0.6.0)
open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59216 Source advisory: GHSA-74H3-CXQ7-VC5Q...
Missing Authorization
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Missing Authorization through the geteventcall process. An attacker can execute arbitrary code and tools in another user's authenticated session by supplying a victim's sessionid and leveraging the lack of...
Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id
Summary An authenticated low-privilege user can execute arbitrary code-interpreter Python and tools inside another user's authenticated session. The Socket.IO event-caller geteventcall delivers execute:python / execute:tool events to a client-supplied sessionid after only checking that the sessio...
Missing Authorization
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Missing Authorization through the chat completion process. An attacker can overwrite messages in channels they do not belong to, including private and direct message channels, by supplying a crafted chatid an...
Insufficient Session Expiration
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Insufficient Session Expiration in the realtime authentication process. An attacker can maintain unauthorized access to realtime features by using a JWT that has been revoked via sign-out or back-channel...
EUVD-2026-42625
Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout...
Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permission
Summary POST /api/v1/images/edit performed no authorization beyond requiring a verified account. Every other image-editing surface in Open WebUI enforces the global image-edit switch and the per-user image-generation permission — the /api/v1/images/generations route, the built-in editimage tool,...
EUVD-2026-42618
Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permission...
Incorrect Authorization
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Incorrect Authorization via the /api/v1/images/edit route. An attacker can trigger server-side image editing operations using administrator-configured credentials, even when global image editing is disabled o...
GHSA-FFPJ-XV5C-P3GW Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config
Summary Two regexes in backend/openwebui/utils/middleware.py that parse skill-mention tags backtrack in On² on input that contains . Both run synchronously, on the asyncio event loop, on every chat completion with no feature gate. Because the default deployment is a single uvicorn worker, one suc...
Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config
Summary Two regexes in backend/openwebui/utils/middleware.py that parse skill-mention tags backtrack in On² on input that contains . Both run synchronously, on the asyncio event loop, on every chat completion with no feature gate. Because the default deployment is a single uvicorn worker, one suc...
EUVD-2026-42620
Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation...
Timing Attack
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Timing Attack via the signin process. An attacker can determine whether specific email addresses are registered by measuring the response time of authentication attempts. Remediation Upgrade open-webui to...
EUVD-2026-42617
Open WebUI: Account enumeration via observable login timing discrepancy...
openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59218 via open-webui (0.6.0)
open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59218 Source advisory: GHSA-7RW5-9F7Q-XJ36...
openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59218 via open-webui (0.6.0)
open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59218 Source advisory: OSV:GHSA-7RW5-9F7Q-XJ36...
openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59218 via open-webui (0.6.0)
open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59218 Source advisory: SNYK:PYTHON-OPENWEBUI-18307448...
EUVD-2026-42616
Open WebUI: Stored web worker XSS via Pyodide...
openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59214 via open-webui (0.6.0)
open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59214 Source advisory: GHSA-4R2P-27MH-5M22...
openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-59214 via open-webui (0.6.0)
open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-59214 Source advisory: OSV:GHSA-4R2P-27MH-5M22...