CVE-2025-63681

Open-WebUI CVE-2025-63681 affects v0.6.33. The API endpoint /api/tasks/stop/ allows direct cancellation of tasks without verifying ownership, enabling a normal user to stop arbitrary LLM response tasks (Incorrect Access Control). Base score 4.3 (Medium); attack vector NETWORK, privileges required...

MAL-2025-191495 Malicious code in @bingads-webui-clientcenter/instrumentation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7efd2376e1aa13253ea637d39c491337b642dec3198639e7b492c1aec1c083ad The package @bingads-webui-clientcenter/instrumentation was found to contain malicious code...

EUVD-2025-200015

Malicious code in @bingads-webui-clientcenter/instrumentation npm...

Malicious code in @bingads-webui-clientcenter/instrumentation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7efd2376e1aa13253ea637d39c491337b642dec3198639e7b492c1aec1c083ad The package @bingads-webui-clientcenter/instrumentation was found to contain malicious code...

GHSA-M449-CWJH-6PW7 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-M449-CWJH-6PW7 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

GHSA-6QV9-48XG-FC7F vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2025-65106 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2025-65106 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-6QV9-48XG-FC7F vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2025-65002

Fujitsu / Fsas Technologies iRMC S6 on M5 before 1.37S mishandles Redfish/WebUI access if the length of a username is exactly 16 characters...

CVE-2025-65002

Fujitsu / Fsas Technologies iRMC S6 on M5 before 1.37S mishandles Redfish/WebUI access if the length of a username is exactly 16 characters...

Exploit for CVE-2025-64495

CVE-2025-64495-POC Open WebUI vulnerable to Stored DOM XSS via...

CVE-2025-64495

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. In versions 0.6.34 and below, the functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prompt body is...

CVE-2025-64496

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.6.224 and prior contain a code injection vulnerability in the Direct Connections feature that allows malicious external model servers to execute arbitrary JavaScript in victim browsers vi...

CVE-2025-64495

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. In versions 0.6.34 and below, the functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prompt body is...

CVE-2025-64496

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.6.224 and prior contain a code injection vulnerability in the Direct Connections feature that allows malicious external model servers to execute arbitrary JavaScript in victim browsers vi...

CVE-2025-64496 Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.6.224 and prior contain a code injection vulnerability in the Direct Connections feature that allows malicious external model servers to execute arbitrary JavaScript in victim browsers vi...

CVE-2025-64496 Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.6.224 and prior contain a code injection vulnerability in the Direct Connections feature that allows malicious external model servers to execute arbitrary JavaScript in victim browsers vi...

CVE-2025-64496

CVE-2025-64496 Open WebUI : A code injection vulnerability in the Direct Connections feature (v0.6.224 and earlier) allows external model servers to push SSE events that execute arbitrary JavaScript in victim browsers, leading to token theft, account takeover, and potential backend RCE when combi...