open-webui Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by open-webui
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Privilege Escalation Vulnerability in Open WebUI Products by Open WebUI
CVE-2026-109572Open-webuiOpen-webui7.2HIGHDenial of Service Vulnerability in Open WebUI by Open WebUI
CVE-2026-109299Open-webuiOpen-webui7.1HIGHMemory Exhaustion Vulnerability in Open WebUI by Open WebUI
CVE-2026-109298Open-webuiOpen-webui7.1HIGHDenial of Service Vulnerability in Open WebUI Automation Features
CVE-2026-109297Open-webuiOpen-webui7.1HIGHUncontrolled Resource Consumption in Open WebUI Affects Server Memory
CVE-2026-109294Open-webuiOpen-webui7.1HIGHInformation Disclosure Vulnerability in Open WebUI by Open WebUI
CVE-2026-109293Open-webuiOpen-webui7.1HIGHInformation Disclosure Vulnerability in Open WebUI by OpenAI
CVE-2026-109292Open-webuiOpen-webui7.6HIGHCross-Site Scripting Vulnerability in Open WebUI Affects Multiple Versions
CVE-2026-109291Open-webuiOpen-webui8.5HIGHStored Cross-Site Scripting in Open WebUI Prior to Version 0.11.4
CVE-2026-109290Open-webuiOpen-webui8.4HIGHStored Cross-Site Scripting Vulnerability in Open WebUI by Open WebUI
CVE-2026-109288Open-webuiOpen-webui7.2HIGHCross-Origin Message Handling Vulnerability in Open WebUI by Open WebUI
CVE-2026-109286Open-webuiOpen-webui8.6HIGHOpen WebUI Vulnerability in AI Self-Hosted Platform
CVE-2026-87999Open-webuiOpen-webui7.1HIGHOpen WebUI Vulnerability in Deletion Process for Knowledge Base by Vendor Open WebUI
CVE-2026-87998Open-webuiOpen-webui7.1HIGHUser-Controllable Hostname Vulnerability in Open WebUI by Open WebUI
CVE-2026-87996Open-webuiOpen-webui7.7HIGHUser Account Takeover Vulnerability in Open WebUI by Open WebUI
CVE-2026-87995Open-webuiOpen-webui8.7HIGHSQL Injection Vulnerability in Open WebUI by Open WebUI
CVE-2026-87016Open-webuiOpen-webui8.1HIGHUnauthenticated Token Handling Flaw in Open WebUI by Open WebUI
CVE-2026-87011Open-webuiOpen-webui7.5HIGHMessage Content Overwrite Vulnerability in Open WebUI by Open WebUI
CVE-2026-59714Open-webuiOpen-webui7.1HIGHVulnerability in Open WebUI Allows Unauthorized Deletion of Chat Messages
CVE-2026-70494Open-webuiOpen-webui8.1HIGHRemote Code Execution in Open WebUI AI Platform
CVE-2026-70492Open-webuiOpen-webui8.7HIGHCross-Site Scripting Vulnerability in Open WebUI Affects Self-Hosted AI Platform
CVE-2026-70486Open-webuiOpen-webui8.2HIGHIPv6 Vulnerability in Open WebUI Affecting Self-Hosted AI Platform
CVE-2026-70485Open-webuiOpen-webui7.1HIGHOAuth Token Exchange Vulnerability in Open WebUI by Open WebUI
CVE-2026-70482Open-webuiOpen-webui8.1HIGHOpen WebUI Vulnerability in Playwright Web Loader
CVE-2026-70479Open-webuiOpen-webui7.7HIGHCross-Origin Resource Sharing Misconfiguration in Open-WebUI Affects Multiple Versions
CVE-2026-56400Open-webuiOpen-webui9CRITICAL