[ Vendor · 19 CVEs ]
open-webui
CVEs affecting open-webui published in the last 30 days, plus any open-webui CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-109572 | 12 Oct 2026 | CVSS 7.6 | open-webuiOpen WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the… | |
| CVE-2026-109296 | 12 Oct 2026 | CVSS 4.3 | open-webuiOpen WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to reach disabled model provider backends by… | |
| CVE-2026-109297 | 12 Oct 2026 | CVSS 6.5 | open-webuiOpen WebUI 0.11.0 before 0.11.4 contains a denial of service vulnerability in the automation recurrence-rule validator, whose sub-daily frequency… | |
| CVE-2026-109298 | 12 Oct 2026 | CVSS 6.5 | open-webuiOpen WebUI 0.11.0 before 0.11.4 compiles user-chosen grep patterns for its knowledge and chat file search tools with a regex engine that expands… | |
| CVE-2026-109299 | 12 Oct 2026 | CVSS 6.5 | open-webuiOpen WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users with automations permission to stall… | |
| CVE-2026-109300 | 12 Oct 2026 | CVSS 4.6 | open-webuiOpen WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scripting vulnerability in its Markdown renderer, which treats user-authored… | |
| CVE-2026-109289 | 12 Oct 2026 | CVSS 6.3 | open-webuiOpen WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal… | |
| CVE-2026-109290 | 12 Oct 2026 | CVSS 7.3 | open-webuiOpen WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to… | |
| CVE-2026-109291 | 12 Oct 2026 | CVSS 7.3 | open-webuiOpen WebUI from 0.6.33 before 0.11.4 contains a cross-site scripting vulnerability that allows authenticated users to execute script in victims'… | |
| CVE-2026-109292 | 12 Oct 2026 | CVSS 6.8 | open-webuiOpen WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies… | |
| CVE-2026-109293 | 12 Oct 2026 | CVSS 6.5 | open-webuiOpen WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export… | |
| CVE-2026-109294 | 12 Oct 2026 | CVSS 6.5 | open-webuiOpen WebUI from 0.6.42 before 0.11.4 contains an uncontrolled resource consumption vulnerability that allows authenticated users to exhaust server… | |
| CVE-2026-109295 | 12 Oct 2026 | CVSS 6.5 | open-webuiOpen WebUI from 0.11.0 before 0.11.4 contains a regular expression denial of service vulnerability that allows authenticated users to stall server… | |
| CVE-2026-109283 | 12 Oct 2026 | CVSS 5.4 | open-webuiOpen WebUI from 0.11.1 before 0.11.4 contains an authorization bypass in the OAuth token exchange endpoint, which reads role claims only from the… | |
| CVE-2026-109284 | 12 Oct 2026 | CVSS 4.3 | open-webuiOpen WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the… | |
| CVE-2026-109285 | 12 Oct 2026 | CVSS 5.0 | open-webuiOpen WebUI from 0.6.0 before 0.11.4 contains an improper access control vulnerability in has_access_to_file that lets former knowledge base… | |
| CVE-2026-109286 | 12 Oct 2026 | CVSS 8.1 | open-webuiOpen WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a… | |
| CVE-2026-109287 | 12 Oct 2026 | CVSS 4.3 | open-webuiOpen WebUI from 0.9.6 before 0.11.4 contains an authorization flaw where the knowledge base file listing does not verify that a supplied directory_id… | |
| CVE-2026-109288 | 12 Oct 2026 | CVSS 6.4 | open-webuiOpen WebUI before 0.11.4 contains a stored cross-site scripting vulnerability in MarkdownInlineTokens.svelte, which renders markdown link URLs into… |