1405 matches found
CVE-2026-0766 Open WebUI load_tool_module_by_id Command Injection Remote Code Execution Vulnerability
Open WebUI loadtoolmodulebyid Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists within the...
CVE-2026-0766 Open WebUI load_tool_module_by_id Command Injection Remote Code Execution Vulnerability
Open WebUI loadtoolmodulebyid Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists within the...
CVE-2026-0766
Open WebUI contains a vulnerability in load_tool_module_by_id that allows remote code execution via command injection. The flaw comes from insufficient validation of a user-supplied string before it is used to execute Python code, enabling an attacker to run arbitrary code in the service account’...
CVE-2026-0765 Open WebUI PIP install_frontmatter_requirements Command Injection Remote Code Execution Vulnerability
Open WebUI PIP installfrontmatterrequirements Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists...
CVE-2026-0765 Open WebUI PIP install_frontmatter_requirements Command Injection Remote Code Execution Vulnerability
Open WebUI PIP installfrontmatterrequirements Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists...
CVE-2026-0765 Open WebUI PIP install_frontmatter_requirements Command Injection Remote Code Execution Vulnerability
Open WebUI PIP installfrontmatterrequirements Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists...
CVE-2026-0765
Open WebUI PIP installfrontmatterrequirements Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists...
Open WebUI: Operating System Command Injection Vulnerability
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Open WebUI has a vulnerability related to operating system command injection. This vulnerability stems from the lack of validation for the strings provided by users in the...
Open WebUI security vulnerabilities
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Open WebUI has a security vulnerability that stems from transmitting sensitive information in plaintext when handling credentials, which may lead to information leakage...
Open WebUI Code Injection Vulnerability
Open WebUI is an open-source, scalable, feature-rich, and user-friendly self-hosted WebUI. Open WebUI has a code injection vulnerability, which stems from the lack of validation for the string provided by users in the loadtoolmodulebyid function. This vulnerability may lead to code injection and...
CVE-2026-23949 vulnerabilities
Vulnerabilities for packages: airflow, datadog-agent, emissary, mlflow, open-webui, py3-setuptools, kubeflow-jupyter-web-app, py3-cassandra-medusa, pypy-3.10, superset, semgrep, kubeflow-katib, kserve, dask-kubernetes, pypy-3.11...
GHSA-58PV-8J8X-9VJ2 vulnerabilities
Vulnerabilities for packages: airflow, datadog-agent, emissary, mlflow, open-webui, py3-setuptools, kubeflow-jupyter-web-app, py3-cassandra-medusa, pypy-3.10, superset, semgrep, kubeflow-katib, kserve, dask-kubernetes, pypy-3.11...
GHSA-58PV-8J8X-9VJ2 vulnerabilities
Vulnerabilities for packages: airflow, nemo, mlflow, pgadmin4, ansible-operator-fips, kserve, datadog-agent-fips, ansible-operator, py3-setuptools, datadog-agent, superset, tensorflow-cpu-jupyter, text-generation-inference, azure-functions-python-worker, awx, emissary, dbt-bigquery, authentik,...
CVE-2026-22691 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-22690 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-4XC4-762W-M6CG vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-4F6G-68PF-7VHV vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-87HC-H4R5-73F7 vulnerabilities
Vulnerabilities for packages: superset...