Open WebUI 代码问题漏洞

Open WebUI is an extensible, feature-rich, user-friendly self-hosted WebUI from Open WebUI open source. A code issue vulnerability exists in versions of Open WebUI prior to 0.6.37 that stems from server-side request forgery and could lead to access to internal networks and services...

CVE-2025-63681

Open-WebUI CVE-2025-63681 affects v0.6.33. The API endpoint /api/tasks/stop/ allows direct cancellation of tasks without verifying ownership, enabling a normal user to stop arbitrary LLM response tasks (Incorrect Access Control). Base score 4.3 (Medium); attack vector NETWORK, privileges required...

MAL-2025-191495 Malicious code in @bingads-webui-clientcenter/instrumentation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7efd2376e1aa13253ea637d39c491337b642dec3198639e7b492c1aec1c083ad The package @bingads-webui-clientcenter/instrumentation was found to contain malicious code...

EUVD-2025-200015

Malicious code in @bingads-webui-clientcenter/instrumentation npm...

Malicious code in @bingads-webui-clientcenter/instrumentation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7efd2376e1aa13253ea637d39c491337b642dec3198639e7b492c1aec1c083ad The package @bingads-webui-clientcenter/instrumentation was found to contain malicious code...

GHSA-M449-CWJH-6PW7 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-M449-CWJH-6PW7 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

GHSA-6QV9-48XG-FC7F vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2025-65106 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2025-65106 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-6QV9-48XG-FC7F vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2025-65002

Fujitsu / Fsas Technologies iRMC S6 on M5 before 1.37S mishandles Redfish/WebUI access if the length of a username is exactly 16 characters...

CVE-2025-65002

Fujitsu / Fsas Technologies iRMC S6 on M5 before 1.37S mishandles Redfish/WebUI access if the length of a username is exactly 16 characters...

Exploit for CVE-2025-64495

CVE-2025-64495-POC Open WebUI vulnerable to Stored DOM XSS via...

CVE-2025-64495

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. In versions 0.6.34 and below, the functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prompt body is...

CVE-2025-64496

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.6.224 and prior contain a code injection vulnerability in the Direct Connections feature that allows malicious external model servers to execute arbitrary JavaScript in victim browsers vi...

CVE-2025-64495

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. In versions 0.6.34 and below, the functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prompt body is...

CVE-2025-64496

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.6.224 and prior contain a code injection vulnerability in the Direct Connections feature that allows malicious external model servers to execute arbitrary JavaScript in victim browsers vi...

CVE-2025-64496 Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.6.224 and prior contain a code injection vulnerability in the Direct Connections feature that allows malicious external model servers to execute arbitrary JavaScript in victim browsers vi...

CVE-2025-64496 Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.6.224 and prior contain a code injection vulnerability in the Direct Connections feature that allows malicious external model servers to execute arbitrary JavaScript in victim browsers vi...