4350 matches found
The vulnerability of the filter_allowed_access_grants() function in the Open WebUI artificial intelligence-based web interface, which allows a violator to increase their privileges
The vulnerability of the filterallowedaccessgrants function in the Open WebUI AI-based web interface is related to the lack of authorization during the processing of the final endpoint /api/v1/channels/id/members. Exploiting this vulnerability could allow a malicious actor to increase their...
PT-2026-59678
Summary A stored Cross-site Scripting XSS vulnerability was identified in the Custom Rules function of the WebUI where attacker-controlled input is persisted by the backend and later rendered in the WebUI without proper output encoding. This allows arbitrary JavaScript execution in the context of...
PT-2026-59400
Summary Open WebUI renders Mermaid blocks from Markdown files in the file preview panel and inserts the generated SVG into the DOM using innerHTML. Because Mermaid is configured with securityLevel: 'loose', attacker-controlled Mermaid content can be rendered unsafely in this flow. A working paylo...
PT-2026-59347
CONFIDENTIAL Vulnerability Disclosure Analysis Documentation --- Vulnerability Details | | Field | Value | |---|-------|-------| | 1 | Discoverer | Taylor Pennington of KoreLogic, Inc. | | 2 | Date Submitted | June 11, 2024 | | 3 | Title | Open WebUI Improper Authorization Control | | 5 | Affecte...
PT-2026-59369
Summary A user can modify another user's model even if its visibility is set to Private. The finding resulted from a penetration test for a customer. It is suspected that the root cause of the issue lies within the core of Open WebUI, which is why it is being reported as a security issue here...
PT-2026-59350
Vulnerability Type: Information Disclosure / Missing Authentication Severity: Medium Component: backend/open webui/routers/retrieval.py — get status GET / Affected Endpoint: GET /api/v1/retrieval/ Affected Version: Open WebUI main branch — confirmed unpatched through v0.9.2 Authentication Require...
PT-2026-59379
CONFIDENTIAL Vulnerability Disclosure Analysis Documentation ----------------------------------------------- Vulnerability Details --------------------- 1. Discoverer: Taylor Pennington of KoreLogic, Inc. 2. Date Submitted: June 11, 2024 3. Title: Open WebUI Arbitrary File Write, Delete via Path...
The vulnerability of the is_user_channelmember() function in the Open WebUI artificial intelligence-based web interface allows a intruder to bypass existing security mechanisms and gain access to read and modify data.
The vulnerability of the isuserchannelmember function in the Open WebUI artificial intelligence-based web interface is related to the lack of restrictions on access to API keys. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms and gain access to...
The vulnerability in the Open WebUI web interface relates to the disclosure of information in the erroneous data area, allowing an intruder to obtain unauthorized access to the protected information.
The vulnerability of the Open WebUI artificial intelligence-based web interface is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the innerHTML component of the Open WebUI web interface allows a attacker to execute arbitrary JavaScript code.
The vulnerability of the innerHTML component in the Open WebUI-based web interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary JavaScript code...
The vulnerability of the Open WebUI web interface, related to the lack of permission checking, allows a violator to gain read access, modify data, and increase their privileges.
The vulnerability of the Open WebUI web interface relates to the lack of permission checking for workspace.models.import. Exploiting this vulnerability can allow an attacker, operating remotely, to gain read access, modify data, and enhance their privileges by sending a specially crafted POST...
The vulnerability of the _sanitize_proxy_path() function (backend/open_webui/routers/terminals.py) in the Open WebUI AI-based web interface allows a attacker to compromise the confidentiality of protected information.
The vulnerability of the sanitizeproxypath function backend/openwebui/routers/terminals.py in the Open WebUI AI-based web interface is related to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability could allow a malicious actor to compromise the...
The vulnerability of the get_sources_from_items() function in the Open WebUI artificial intelligence-based web interface allows a intruder to gain unauthorized access to protected information.
The vulnerability of the getsourcesfromitems function in the Open WebUI AI-based web interface is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through the Range Addressing RAG...
The vulnerability of the Open WebUI web interface, related to the lack of authentication, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the Open WebUI web interface lies in the lack of authentication when processing the endpoint /api/v1/channels/id/members with a known channel UUID. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
PT-2026-59339
As part of our research on improving our AI pentest, we have uncovered the following issue in Open WebUI. We've manually verified and tided up the report, but you can also find the original agent finding at the bottom of this report. Summary The channel webhook create/update flow accepts arbitrar...
EUVD-2026-42726
Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to circumvent local-origin IP restrictions on onboarding endpoints by supplying a spoofed X-Forwarded-For header with a loopback address. Attackers can exploit this bypass to...
The vulnerability of the Open WebUI web interface, related to deficiencies in the authentication process, allows attackers to escalate their privileges.
The vulnerability of the Open WebUI web interface is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...
The vulnerability in the Open WebUI web interface, related to the unlimited loading of dangerous types of files, allows attackers to bypass existing security mechanisms and load any files they desire.
The vulnerability of the Open WebUI web interface is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms and load any desired files...
CVE-2026-58123
Hermes WebUI before 0.51.788 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell commands by accessing the embedded terminal API endpoints without credentials. Attackers can create a session, attach a PTY shell, and write arbitra...
CVE-2026-58122
Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to circumvent local-origin IP restrictions on onboarding endpoints by supplying a spoofed X-Forwarded-For header with a loopback address. Attackers can exploit this bypass to...