Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/15 7:57 p.m.9 views

CVE-2026-44552 Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the toolservers and terminalservers keys in utils/tools.py do use a prefix. When two or more Open WebUI instances share a Redis database a supported and documented deployment pattern...

8.7CVSS6AI score0.00305EPSS
SaveExploits1References3
Rows per page
Query Builder