3227 matches found
ai-kubernetes-helm-chart-security
AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...
CVE-2026-70481
CVE-2026-70481 Open WebUI, affected 0.5.0 through 0.10.2, patched in 0.11.0. Moderate, CVSS 5.4, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L, CWE-284 and CWE-862. In backend/openwebui/routers/channels.py the message update and delete handlers branch on the channel type, and the two branches ask...
CVE-2025-64495-POC
CVE-2025-64495-POC Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE Summary The functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prom...
POC_CVE-2024-12537
CVE-2024-12537 Open WebUI Code Format DoS Lab This repository contains a local, isolated reproduction lab and nuclei template candidate for CVE-2024-12537, an unauthenticated denial-of-service vulnerability in Open WebUI's code formatting endpoint. The lab does not send large denial-of-service...
Open WebUI < 0.9.5 - Information Disclosure
Open WebUI 0.9.5 contains an information disclosure vulnerability caused by unauthenticated access to GET /api/v1/retrieval/ endpoint, letting remote attackers retrieve live RAG pipeline configuration without authorization, exploit requires no authentication. id: CVE-2026-45397 info: name: Open...
Open WebUI 'LDAP Empty Password' - Authentication Bypass
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP authentication endpoint does not validate that the submitted password is non-empty before performing a Simple Bind against the LDAP server. The LdapForm Pydantic model accep...
CVE-2024-7808
CVE-2024-7808 💀 $$\colorred THIS \space EXPLOIT \space MAY \space VIOLATE \space THE \space LAW.$$ $$\colorred\space YOU \space ARE \space RESPONSIBLE \space FOR \space YOUR \space ACTIONS.$$ $$\colorredDEMONSTRATION \space PURPOSE \space ONLY.$$ DESCRIPTION RCE by Non-Admin Users via CSRF in...
enforcement-coverage
Enforcement Coverage Finds API routes that carry a weaker authorization control than their siblings. It found CVE-2026-45316 in Open WebUI from source alone, with no advisory knowledge: MISMATCH POST /notes/id/pin notes.py:pinnotebyid 3/3 comparable write operations on note require hasaccesswrite...
CVE-2026-112390 vulnerabilities
Vulnerabilities for packages: open-webui, py3-pillow...
CVE-2026-112392 vulnerabilities
Vulnerabilities for packages: open-webui, py3-pillow...
CVE-2026-112396 vulnerabilities
Vulnerabilities for packages: open-webui, py3-pillow...
CVE-2026-112402 vulnerabilities
Vulnerabilities for packages: open-webui, py3-pillow...
CVE-2026-112406 vulnerabilities
Vulnerabilities for packages: open-webui, py3-pillow...
CVE-2026-112900 vulnerabilities
Vulnerabilities for packages: open-webui, py3-pillow...
GHSA-27H8-GF7J-V5HC vulnerabilities
Vulnerabilities for packages: open-webui, py3-pillow...
GHSA-332P-7HRC-92WF vulnerabilities
Vulnerabilities for packages: open-webui, py3-pillow...
GHSA-4558-3H8R-V8XP vulnerabilities
Vulnerabilities for packages: open-webui, py3-pillow...
GHSA-XGH8-JP6Q-P5X8 vulnerabilities
Vulnerabilities for packages: open-webui, py3-pillow...