122358 matches found
CVE-2026-18813
creationtimestamp| type| source ---|---|--- 2026-08-04 21:49:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2lkjejcezmnlb...
ILSpy v11.0-rc
ILSpy ILSpy is the open-source, cross-platform .NET assembly browser and decompiler. The desktop UI runs on Windows, Linux, and macOS built on Avalonia. Download: latest release | latest CI build master | Microsoft Store RTM versions only Decompiler Frontends Aside from the cross-platform desktop...
GHSA-3CG5-48J3-V4GV
creationtimestamp| type| source ---|---|--- 2026-08-04 21:31:22+00:00| seen| https://gist.github.com/alon710/e57220ec033758e1c7ba8d20ade18b9d...
CVE-2026-66902
creationtimestamp| type| source ---|---|--- 2026-08-04 21:24:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/5jerlnuteddya 2026-08-05 20:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msedshg2v22h 2026-08-06 12:32:03+00:00| seen|...
CVE-2026-66901
creationtimestamp| type| source ---|---|--- 2026-08-04 21:22:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3iwqm2chk7oin...
CVE-2026-70491
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. In 0.10.2 and earlier, the GET /api/v1/tools/, GET /api/v1/tools/list, and GET /api/v1/tools/id/id endpoints in backend/openwebui/routers/tools.py returned full Python tool source to authenticated non-admin...
CVE-2026-45538
creationtimestamp| type| source ---|---|--- 2026-08-04 21:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbwosyvzx2h...
CVE-2025-29296
creationtimestamp| type| source ---|---|--- 2026-08-04 21:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbwhogkt22l...
Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints
Summary A workspace tool shared with a read grant returned its full Python source to the recipient. Any authenticated non-admin who could use a shared tool could also read its source, including any user on the instance when a tool was shared publicly. Source is meant to be a writer-only tier: the...
GHSA-3R7G-Q6CG-Q2VX Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints
Summary A workspace tool shared with a read grant returned its full Python source to the recipient. Any authenticated non-admin who could use a shared tool could also read its source, including any user on the instance when a tool was shared publicly. Source is meant to be a writer-only tier: the...
Information Exposure
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Information Exposure via the GET /api/v1/tools/, GET /api/v1/tools/list, and GET /api/v1/tools/id/id endpoints. An attacker can access sensitive source code and potentially embedded secrets by making...
CVE-2026-70491
Open WebUI vulnerability CVE-2026-70491 affects the self-hosted Open WebUI platform. In versions up to 0.10.2, the GET endpoints /api/v1/tools/, /api/v1/tools/list, and /api/v1/tools/id/{id} exposed full Python tool source to authenticated non-admin read-only users due to the interaction between ...
EUVD-2026-52922
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. In 0.10.2 and earlier, the GET /api/v1/tools/, GET /api/v1/tools/list, and GET /api/v1/tools/id/id endpoints in backend/openwebui/routers/tools.py returned full Python tool source to authenticated non-admin...
CVE-2026-70491
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. In 0.10.2 and earlier, the GET /api/v1/tools/, GET /api/v1/tools/list, and GET /api/v1/tools/id/id endpoints in backend/openwebui/routers/tools.py returned full Python tool source to authenticated non-admin...
CVE-2026-70491 Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. In 0.10.2 and earlier, the GET /api/v1/tools/, GET /api/v1/tools/list, and GET /api/v1/tools/id/id endpoints in backend/openwebui/routers/tools.py returned full Python tool source to authenticated non-admin...
CVE-2026-70491 Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. In 0.10.2 and earlier, the GET /api/v1/tools/, GET /api/v1/tools/list, and GET /api/v1/tools/id/id endpoints in backend/openwebui/routers/tools.py returned full Python tool source to authenticated non-admin...
CVE-2026-70491 Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. In 0.10.2 and earlier, the GET /api/v1/tools/, GET /api/v1/tools/list, and GET /api/v1/tools/id/id endpoints in backend/openwebui/routers/tools.py returned full Python tool source to authenticated non-admin...
GHSA-8X5V-CPV7-8JJP
creationtimestamp| type| source ---|---|--- 2026-08-04 20:31:40+00:00| seen| https://gist.github.com/alon710/a07f9786cabb1f06c1eba431ddd448e4...
CVE-2026-70485
creationtimestamp| type| source ---|---|--- 2026-08-04 20:31:40+00:00| seen| https://gist.github.com/alon710/a07f9786cabb1f06c1eba431ddd448e4 2026-08-04 20:35:03+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-8x5v-cpv7-8jjp...