CVE-2026-81724 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-5GH2-94QG-QPPQ vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-FF5C-CP5C-9WJF vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-M4RF-3FR8-XWX3 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-QX2G-XRX7-VFH8 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-F794-5JV7-7672 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-VP2X-QP44-57V7 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-12876 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-78680 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-6HWM-XVPH-95VM vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-CV22-G7MW-8V73 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-66393 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.13-sdk, open-webui, label-studio, apache-beam-python-3.12-sdk, apache-beam-python-3.11-sdk, nemo, py3-nltk, kubeflow-pipelines-visualization-server...

GHSA-CV2G-M8RR-888C vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.13-sdk, open-webui, label-studio, apache-beam-python-3.12-sdk, apache-beam-python-3.11-sdk, nemo, py3-nltk, kubeflow-pipelines-visualization-server...

CVE-2026-66393 vulnerabilities

Vulnerabilities for packages: py3-nltk, kubeflow-pipelines-visualization-server, open-webui...

GHSA-CV2G-M8RR-888C vulnerabilities

Vulnerabilities for packages: py3-nltk, kubeflow-pipelines-visualization-server, open-webui...

GHSA-FFG3-P8FM-MJX2 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-55830 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-55830 vulnerabilities

Vulnerabilities for packages: open-webui, litellm...

GHSA-FFG3-P8FM-MJX2 vulnerabilities

Vulnerabilities for packages: open-webui, litellm...

CVE-2026-59714

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 before 0.10.0, any authenticated user can overwrite the content of a message in a channel they do not belong to including private and DM channels by sending a chat completion request with a...