CVE-2026-27026 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-9MVC-8737-8J8H vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-WGVP-VG3V-2XQ3 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-27024 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-29VQ-49WR-VM6X vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, open-webui, kubeflow-pipelines-visualization-server, tensorflow-cpu-jupyter, azure-functions-python-worker, localstack, airflow, superset, airflow-core, emissary, litellm, mlflow, tensorflow-gpu-jupyter...

GHSA-68RP-WP8R-4726 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, open-webui, airflow, airflow-core, emissary, mlflow, mitmproxy...

CVE-2026-27199 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, open-webui, kubeflow-pipelines-visualization-server, tensorflow-cpu-jupyter, azure-functions-python-worker, localstack, airflow, superset, airflow-core, emissary, litellm, mlflow, tensorflow-gpu-jupyter...

VulnCheck KEV: CVE-2024-6250

An absolute path traversal vulnerability exists in parisneo/lollms-webui v9.6, specifically in the openfile endpoint of lollmsadvanced.py. The sanitizepath function with allowabsolutepath=True allows an attacker to access arbitrary files and directories on a Windows system. This vulnerability can...

alignak-backend (>=1.4.15, <=1.4.16), alignak-webui (>=0.11.1, <=0.12.2) +11 more potentially affected by CVE-2026-27205 via flask (0.12.0)

flask PYPI version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - alignak-backend =1.4.15, =0.11.1, =0.1.0, =0.5.0, =1.0.8, =4.5.0, =0.2.0.dev0, =0.2.0, =23.1.0, =1.0.2, =1.0.5 - showcase 0.3.4 Source cves:...

CVE-2026-26192

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.7.0, aanually modifying chat history allows setting the html property within document metadata. This causes the frontend to enter a code path that treats document contents as HTML...

CVE-2026-26193

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.44, aanually modifying chat history allows setting the embeds property on a response message, the content of which is loaded into an iFrame with a sandbox that has allow-scripts...

CVE-2026-26193 Open WebUI vulnerable to Stored XSS via iFrame embeds in response messages

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.44, aanually modifying chat history allows setting the embeds property on a response message, the content of which is loaded into an iFrame with a sandbox that has allow-scripts...

CVE-2026-26193 Open WebUI vulnerable to Stored XSS via iFrame embeds in response messages

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.44, aanually modifying chat history allows setting the embeds property on a response message, the content of which is loaded into an iFrame with a sandbox that has allow-scripts...

CVE-2026-26192 Open WebUI vulnerable to Stored XSS via iFrame in citations model

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.7.0, aanually modifying chat history allows setting the html property within document metadata. This causes the frontend to enter a code path that treats document contents as HTML...

CVE-2026-26192

Open WebUI (self-hosted offline) before v0.7.0 allows stored XSS via a crafted document payload by modifying chat history to set html in document metadata; the frontend treats contents as HTML and renders in an iframe during citation preview or shared chat view. Version 0.7.0 fixes the issue. No ...

CVE-2026-26192 Open WebUI vulnerable to Stored XSS via iFrame in citations model

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.7.0, aanually modifying chat history allows setting the html property within document metadata. This causes the frontend to enter a code path that treats document contents as HTML...

CVE-2026-26192 Open WebUI vulnerable to Stored XSS via iFrame in citations model

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.7.0, aanually modifying chat history allows setting the html property within document metadata. This causes the frontend to enter a code path that treats document contents as HTML...

CVE-2026-26193: Improper Neutralization of Input During Web Page Generation

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.44, aanually modifying chat history allows setting the embeds property on a response message, the content of which is loaded into an iFrame with a sandbox that has allow-scripts...

CVE-2026-26192: Improper Neutralization of Input During Web Page Generation

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.7.0, aanually modifying chat history allows setting the html property within document metadata. This causes the frontend to enter a code path that treats document contents as HTML...

Open WebUI 跨站脚本漏洞

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Versions of Open WebUI prior to 0.6.44 contained a cross-site scripting vulnerability. This vulnerability arises from the possibility of storing cross-site scripting attacks when manual modifications...