1780 matches found
CVE-2026-0765
Open WebUI PIP installfrontmatterrequirements Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists...
CVE-2026-0765 Open WebUI PIP install_frontmatter_requirements Command Injection Remote Code Execution Vulnerability
Open WebUI PIP installfrontmatterrequirements Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists...
CVE-2026-0765 Open WebUI PIP install_frontmatter_requirements Command Injection Remote Code Execution Vulnerability
Open WebUI PIP installfrontmatterrequirements Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists...
Open WebUI Code Injection Vulnerability
Open WebUI is an open-source, scalable, feature-rich, and user-friendly self-hosted WebUI. Open WebUI has a code injection vulnerability, which stems from the lack of validation for the string provided by users in the loadtoolmodulebyid function. This vulnerability may lead to code injection and...
Open WebUI security vulnerabilities
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Open WebUI has a security vulnerability that stems from transmitting sensitive information in plaintext when handling credentials, which may lead to information leakage...
Open WebUI: Operating System Command Injection Vulnerability
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Open WebUI has a vulnerability related to operating system command injection. This vulnerability stems from the lack of validation for the strings provided by users in the...
CVE-2026-23949 vulnerabilities
Vulnerabilities for packages: kubeflow-jupyter-web-app, pypy-3.10, airflow, kubeflow-katib, dask-kubernetes, datadog-agent, mlflow, semgrep, kserve, pypy-3.11, py3-setuptools, emissary, superset, open-webui, py3-cassandra-medusa...
GHSA-58PV-8J8X-9VJ2 vulnerabilities
Vulnerabilities for packages: kubeflow-jupyter-web-app, pypy-3.10, airflow, kubeflow-katib, dask-kubernetes, datadog-agent, mlflow, semgrep, kserve, pypy-3.11, py3-setuptools, emissary, superset, open-webui, py3-cassandra-medusa...
GHSA-58PV-8J8X-9VJ2 vulnerabilities
Vulnerabilities for packages: tensorflow-cpu-jupyter, semgrep, dbt-bigquery, awx, datadog-agent, py3.9-setuptools, airflow, kubeflow-katib, azure-functions-python-worker, py3-cassandra-medusa, spamcheck, kubeflow-jupyter-web-app, mlflow, dask-kubernetes, datadog-agent-fips, label-studio, authenti...
CVE-2026-22691 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-22690 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-4XC4-762W-M6CG vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-87HC-H4R5-73F7 vulnerabilities
Vulnerabilities for packages: superset...
CVE-2026-21860 vulnerabilities
Vulnerabilities for packages: superset...
GHSA-4F6G-68PF-7VHV vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-4F6G-68PF-7VHV vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-87HC-H4R5-73F7 vulnerabilities
Vulnerabilities for packages: azure-functions-python-worker, tensorflow-cpu-jupyter, superset...
GHSA-4XC4-762W-M6CG vulnerabilities
Vulnerabilities for packages: open-webui...
PT-2026-1995
Name of the Vulnerable Software and Affected Versions Open WebUI affected versions not specified Description A flaw exists in Open WebUI that allows remote attackers to execute arbitrary code. Authentication is required to exploit this issue. The vulnerability is located within the install...