Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/05/15 7:57 p.m.61 views

CVE-2026-44552 Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the toolservers and terminalservers keys in utils/tools.py do use a prefix. When two or more Open WebUI instances share a Redis database a supported and documented deployment pattern...

8.7CVSS0.00305EPSS
SaveExploits1References1
Rows per page
Query Builder