What’s Vulnerable › Products

open-webui vulnerabilities

176 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 165 published in the last 12 months.

Check whether your open-webui version is affected

Latest open-webui vulnerabilities

• CVE-2026-109572 — Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy (CVSS 7.6)
• CVE-2026-109300 — Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call Embeds (CVSS 4.6)
• CVE-2026-109299 — Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validation (CVSS 6.5)
• CVE-2026-109298 — Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regex (CVSS 6.5)
• CVE-2026-109297 — Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence Rules (CVSS 6.5)
• CVE-2026-109296 — Open WebUI before 0.11.4 Missing Authorization via Backend Index on Model Routes (CVSS 4.3)
• CVE-2026-109295 — Open WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowledge_files Event Loop (CVSS 4.3)
• CVE-2026-109294 — Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Image (CVSS 6.5)
• CVE-2026-109293 — Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint (CVSS 6.5)
• CVE-2026-109292 — Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections (CVSS 6.8)
• CVE-2026-109291 — Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citation embed_url (CVSS 7.3)
• CVE-2026-109290 — Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview (CVSS 8.7)
• CVE-2026-109289 — Open WebUI 0.8.8 before 0.11.4 Improper Session Revocation via Terminal WebSocket (CVSS 6.3)
• CVE-2026-109288 — Open WebUI before 0.11.4 Stored XSS via javascript: URLs in Markdown Links (CVSS 6.4)
• CVE-2026-109287 — Open WebUI 0.9.6 before 0.11.4 Information Disclosure via Unscoped Directory ID (CVSS 4.3)
• CVE-2026-109286 — Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModal (CVSS 8.1)
• CVE-2026-109285 — Open WebUI 0.6.0 before 0.11.4 Improper Access Control via Stale File Metadata (CVSS 5.0)
• CVE-2026-109284 — Open WebUI 0.11.0 before 0.11.4 Improper Authorization via Chat Fork Endpoint (CVSS 4.3)
• CVE-2026-109283 — Open WebUI 0.11.1 before 0.11.4 Authorization Bypass via OAuth Token Exchange (CVSS 5.4)
• CVE-2026-88006 — Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange (CVSS 6.5)
• CVE-2026-88005 — Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange (CVSS 6.5)
• CVE-2026-88002 — Open WebUI: Any authenticated user can hang the server via a cyclic chat message history (CVSS 6.5)
• CVE-2026-88001 — Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets (CVSS 5.0)
• CVE-2026-88000 — Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree (CVSS 6.5)
• CVE-2026-87999 — Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch (CVSS 7.1)