CVE-2024-7808

CVE-2024-7808 💀 $$\colorred 이 \space 익스플로잇은 \space 법을 \space 위반할 \space 수 \space 있습니다.$$ $$\colorred\space 당신은 \space 당신의 \space 행동에 \space 대해 \space 책임이 \space 있습니다.$$ $$\colorred시연 \space 목적 \space 전용.$$ 설명 open-webui에서 비관리자 사용자에 의한 CSRF를 통한 RCE 는 공격자가 내장된 자바스크립트가 포함된 악성 HTML 문서를 전송하여 역방향 셸을 포함...

Open WebUI 'LDAP Empty Password' - Authentication Bypass

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP authentication endpoint does not validate that the submitted password is non-empty before performing a Simple Bind against the LDAP server. The LdapForm Pydantic model accep...

Open WebUI < 0.9.5 - Information Disclosure

Open WebUI 0.9.5 contains an information disclosure vulnerability caused by unauthenticated access to GET /api/v1/retrieval/ endpoint, letting remote attackers retrieve live RAG pipeline configuration without authorization, exploit requires no authentication. id: CVE-2026-45397 info: name: Open...

CVE-2026-102998 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-PHP9-FJ8V-98FJ vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-102995 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-JW7Q-GVRG-4VJ3 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-5JQ2-8X83-X246 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-G9CG-PRRW-2R8Q vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-102993 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-102994 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-102997 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-QV6H-RV94-W285 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-W23X-9JRW-R45C vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-V247-6F48-MGCJ vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-103000 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-102996 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-102999 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-FP3H-C4FM-7VVF vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-102993 vulnerabilities

Vulnerabilities for packages: open-webui...