4983 matches found
GHSA-WJWR-XFP9-R66P Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes
Summary A user who is demoted from admin by an identity provider keeps admin-level read and write access to every user's notes, over any Socket.IO connection that was already open when the demotion happened. Open WebUI caches the user's role on the socket at connection time, and the two SSO...
CVE-2026-87015
creationtimestamp| type| source ---|---|--- 2026-09-10 22:35:03+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-p78m-89r6-pgf7...
Insertion of Sensitive Information Into Sent Data
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the tool loading process. An attacker can gain unauthorized access to user session credentials by operating a tool server configured for bearer...
EUVD-2026-75174
Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication...
Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication
Summary When more than one external tool server is reachable in the same request, a tool call to a server configured for bearer authentication can arrive carrying the calling user's Open WebUI session cookies alongside that server's own key. The cookie jar is built per connection, but the callabl...
GHSA-P78M-89R6-PGF7 Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication
Summary When more than one external tool server is reachable in the same request, a tool call to a server configured for bearer authentication can arrive carrying the calling user's Open WebUI session cookies alongside that server's own key. The cookie jar is built per connection, but the callabl...
Improper Authentication
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Improper Authentication in the getuserbyoauthsub or getuserbyscimexternalid process. An attacker can gain unauthorized access to another user's account, including administrator accounts, by supplying speciall...
Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite
Summary On SQLite deployments, the lookup that maps an external identity to a local account does a substring match instead of an exact match. A subject value containing SQL wildcard characters therefore matches accounts the value was never issued for, and the sign-in binds to whichever account th...
EUVD-2026-75176
Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite...
GHSA-WPMR-8H3Q-FWJ7 Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite
Summary On SQLite deployments, the lookup that maps an external identity to a local account does a substring match instead of an exact match. A subject value containing SQL wildcard characters therefore matches accounts the value was never issued for, and the sign-in binds to whichever account th...
CVE-2026-87999
creationtimestamp| type| source ---|---|--- 2026-09-10 16:35:21+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-34r3-9m95-vq73...
CVE-2026-87998
creationtimestamp| type| source ---|---|--- 2026-09-10 16:35:19+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-2724-6cpj-gf3v...
CVE-2026-87997
creationtimestamp| type| source ---|---|--- 2026-09-10 16:35:17+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-3pf7-q2g3-wj28...
CVE-2026-87994
creationtimestamp| type| source ---|---|--- 2026-09-10 16:35:10+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-fmqh-xp37-5hr8...
CVE-2026-87017
creationtimestamp| type| source ---|---|--- 2026-09-10 16:35:08+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-pcvc-8vrv-8q6w...
CVE-2026-88005
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.9.0, Open WebUI's OAuth token exchange endpoint issues a session for a provider access token without applying the email domain allowlist that the normal OAuth login callback enforces. An accou...
CVE-2026-88006
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.1, Open WebUI's OAuth token exchange endpoint issues a session for a provider access token without running the OAuth role management that the normal OAuth login callback runs. A user whose...
Incorrect Authorization
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Incorrect Authorization in the search process. An attacker can obtain unauthorized access to the identifier, name, and description of knowledge bases by exploiting improper filter application in certain vecto...
Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends
Summary The built-in knowledge search tool returns knowledge bases the calling user has no access to. The tool works out which knowledge bases the caller may read and hands that set to the vector store as a search filter, and that filter is the only access control on the path. Most of the shipped...