PT-2026-50488

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.6 Description Open WebUI contains a Broken Object Level Authorization BOLA issue in the builtin search knowledge files function. BOLA occurs when an application does not properly verify if a user has permission...

CVE-2026-55197: Authorization Bypass Through User-Controlled Key

Hermes WebUI before 0.51.443 contains a broken access control vulnerability in the /api/session endpoint that allows authenticated users to disclose cross-profile session transcripts. Attackers can bypass profile boundary checks by directly querying session IDs belonging to other profiles via GET...

PT-2026-56895

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.6 through 0.9.9 Description The sanitize proxy path function in backend/open webui/routers/terminals.py fails to properly normalize proxy paths by decoding them only eight times. This allows a nine-times percent-encoded...

CVE-2026-48155 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-48156 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-RGXP-2HWP-JWGG vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-25087 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-49973

Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows unauthenticated remote attackers to hijack initial setup by submitting the setpassword parameter to the settings API endpoint without any network origin restriction. Attackers on any reachable netwo...

CVE-2026-49973 Hermes WebUI < 0.51.358 Unauthenticated Password Takeover via /api/settings

Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows unauthenticated remote attackers to hijack initial setup by submitting the setpassword parameter to the settings API endpoint without any network origin restriction. Attackers on any reachable netwo...

CVE-2026-49973

CVE-2026-49973 affects Hermes WebUI prior to version 0.51.358. The issue is an improper access control in the settings API that allows unauthenticated remote attackers to hijack the initial setup by posting to the /api/settings endpoint using the _set_password parameter without origin restriction...

EUVD-2026-36306

Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows unauthenticated remote attackers to hijack initial setup by submitting the setpassword parameter to the settings API endpoint without any network origin restriction. Attackers on any reachable netwo...

CVE-2026-49973 Hermes WebUI < 0.51.358 Unauthenticated Password Takeover via /api/settings

Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows unauthenticated remote attackers to hijack initial setup by submitting the setpassword parameter to the settings API endpoint without any network origin restriction. Attackers on any reachable netwo...

CVE-2026-54011

creationtimestamp| type| source ---|---|--- 2026-06-11 18:58:03+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-v8qj-hxv7-mgvv 2026-07-10 11:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqbyyvqikn23...

CVE-2026-54010

creationtimestamp| type| source ---|---|--- 2026-06-11 18:57:21+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-vrhc-3fr6-pc3c 2026-07-18 17:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqwsjmkf4t2m...

CVE-2026-54007

creationtimestamp| type| source ---|---|--- 2026-06-11 18:56:24+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-3vv5-8xxp-4f55...

Arbitrary File Write

open-webui/open-webui is vulnerable to an arbitrary file write. The vulnerability is due to improper handling of file paths in the downloadmodel endpoint on Windows, which allows an attacker to manipulate file paths and write files to arbitrary locations on the server...

CVE-2026-49973: Missing Authentication for Critical Function

Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows unauthenticated remote attackers to hijack initial setup by submitting the setpassword parameter to the settings API endpoint without any network origin restriction. Attackers on any reachable netwo...

CVE-2026-49957

Hermes WebUI before version 0.51.296 contains a workspace boundary bypass vulnerability that allows authenticated attackers to circumvent blocked-root path checks by exploiting an early return in the SSH/remote terminal profile workspace resolution logic within remoteterminalworkspacecandidate...

CVE-2026-49955

Hermes WebUI before version 0.51.270 contains a resource exhaustion vulnerability that allows unauthenticated remote attackers to degrade service availability by repeatedly calling the passkey options endpoint without completing assertion. Attackers can send unlimited POST requests to the...

CVE-2026-49959

Hermes WebUI before version 0.51.311 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by placing malicious executable Git configuration in a workspace repository's .git/config file. Attackers can exploit Git subprocess invocations in...