3354 matches found
DEBIAN-CVE-2026-17888
Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: Medium...
CVE-2026-17888
Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: Medium...
CVE-2026-17888
Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: Medium...
CVE-2026-13893
An insufficient validation of untrusted input flaw was found in the WebUI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501729582...
CVE-2026-59212
creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:07+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-2xwm-4h2q-ggfx...
GHSA-FRVJ-C5QP-XJ4W open-webui terminal proxy path traversal guard bypass via 9x encoded traversal
AI assistance was used to help inspect the code and prepare this report. Summary The fix for GHSA-r2wg-2mcr-66rv is incomplete in v0.9.6 and current main. backend/openwebui/routers/terminals.py documents sanitizeproxypath as decoding until stable, but the implementation stops after 8 unquote...
GHSA-M3QF-58WF-W979 Open WebUI: Arena task endpoints can bypass underlying model access controls
Summary An authenticated non-admin user with read access to an arena wrapper model can reach a restricted underlying model through task endpoints such as /api/v1/tasks/moa/completions. The normal chat route resolves arena models before the final chat dispatch and therefore re-checks the selected...
EUVD-2026-42634
Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete...
EUVD-2026-42633
Open WebUI: WEBFETCHFILTERLIST host allow/block filter bypassable via URL path and non-label-boundary matching...
EUVD-2026-42631
Open WebUI: /api/v1/channels/id/members exposes full user model including sensitive credentials...
GHSA-73X5-H92W-XC2J Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding
Summary A normal authenticated user can read the content of a message in a private channel they do not belong to. GET /api/v1/channels/id/messages/messageid/thread authorizes the caller against the URL channel, but the underlying thread lookup loads the thread parent by id and returns it without...
EUVD-2026-42630
Open WebUI: Private channel messages can be disclosed through cross-channel thread parentid binding...
EUVD-2026-42629
Open WebUI: Cross-user model-list exposure via static cache key in getallmodels aiocache key= vs keybuilder= misuse...
EUVD-2026-42625
Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout...
EUVD-2026-42618
Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permission...
GHSA-FFPJ-XV5C-P3GW Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config
Summary Two regexes in backend/openwebui/utils/middleware.py that parse skill-mention tags backtrack in On² on input that contains . Both run synchronously, on the asyncio event loop, on every chat completion with no feature gate. Because the default deployment is a single uvicorn worker, one suc...
EUVD-2026-42620
Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation...
EUVD-2026-42616
Open WebUI: Stored web worker XSS via Pyodide...
