CVE-2024-8053

In version v0.3.10 of open-webui/open-webui, the "api/v1/utils/pdf" endpoint lacks authentication mechanisms, allowing unauthenticated attackers to access the PDF generation service. This vulnerability can be exploited by sending a POST request with an excessively large payload, potentially leadi...

PT-2025-12292

Name of the Vulnerable Software and Affected Versions open-webui/open-webui version 0.3.21 Description A Denial of Service DoS issue exists, affecting multiple endpoints, including "/ollama/models/upload", "/audio/api/v1/transcriptions", and "/rag/api/v1/doc". The application processes multipart...

PT-2025-12201

Name of the Vulnerable Software and Affected Versions open-webui/open-webui version 79778fa Description A vulnerability allows an attacker to cause a Denial of Service DoS by uploading a file with a malformed multipart boundary. By appending a large number of characters to the end of the multipar...