GHSA-4F6G-68PF-7VHV vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-87HC-H4R5-73F7 vulnerabilities

Vulnerabilities for packages: azure-functions-python-worker, tensorflow-cpu-jupyter, superset...

PT-2026-1995

Name of the Vulnerable Software and Affected Versions Open WebUI affected versions not specified Description A flaw exists in Open WebUI that allows remote attackers to execute arbitrary code. Authentication is required to exploit this issue. The vulnerability is located within the install...

(0Day) Open WebUI load_tool_module_by_id Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists within the loadtoolmodulebyid function. The issue results from the lack of proper validation of a...

(0Day) Open WebUI PIP install_frontmatter_requirements Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The specific flaw exists within the installfrontmatterrequirements function.The issue results from the lack of proper validation ...

CVE-2025-3730 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-887C-MR87-CXWP vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2025-66019 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-887C-MR87-CXWP vulnerabilities

Vulnerabilities for packages: py3-torch-cuda-12.8...

CVE-2025-3730 vulnerabilities

Vulnerabilities for packages: py3-torch-cuda-12.8...

GHSA-428G-F7CQ-PGP5 vulnerabilities

Vulnerabilities for packages: ggshield, airflow, superset, open-webui...

CVE-2025-68480 vulnerabilities

Vulnerabilities for packages: ggshield, airflow, py3-marshmallow, airflow-core, open-webui, superset...

EUVD-2025-204307

An authentication bypass vulnerability exists in Open-WebUI =0.6.32 in the /api/config endpoint. The endpoint lacks proper authentication and authorization controls, exposing sensitive system configuration data to unauthenticated remote attackers...

CVE-2025-63391

An authentication bypass vulnerability exists in Open-WebUI =0.6.32 in the /api/config endpoint. The endpoint lacks proper authentication and authorization controls, exposing sensitive system configuration data to unauthenticated remote attackers...

Missing Authentication for Critical Function

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the /api/config endpoint. An attacker can access sensitive system configuration data by sending unauthenticated GET requests to this endpoint. Remediation Ther...

CVE-2025-63391

Open-WebUI contains an authentication bypass in the /api/config endpoint present in versions up to 0.6.32, allowing unauthenticated remote attackers to access sensitive system configuration data. This is documented across multiple sources (RH/CVE-2025-63391, ENISA EUVD, CNNVD) and corroborated by...

Open WebUI 安全漏洞

Open WebUI is an extensible, feature-rich, user-friendly self-hosted WebUI from Open WebUI Open Source. A security vulnerability exists in Open WebUI version 0.6.32 and earlier, which stems from an authentication bypass that could lead to unauthorized access to system configuration data...

PT-2025-52240

Name of the Vulnerable Software and Affected Versions Open-WebUI versions through 0.6.32 Description An authentication bypass exists in the /api/config endpoint of Open-WebUI. The endpoint does not have sufficient authentication and authorization controls, potentially allowing unauthenticated...

Code Injection

Open WebUI is vulnerable to a code injection vulnerability. The vulnerability is due to improper handling of Server-Sent Event SSE execute events in the Direct Connections feature, which allows an attacker controlling a malicious external model server to inject and execute arbitrary JavaScript in...

Server-Side Request Forgery (SSRF)

Open WebUI is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to insufficient validation of user-supplied URLs, allowing authenticated users to force the server to send HTTP requests to arbitrary destinations, which may enable access to internal services, cloud metadata...