open-webui Latest Vulnerabilities
Latest vulnerabilities published by open-webui
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Server-Side Request Forgery in Open WebUI by Open WebUI
CVE-2026-45338Open-webuiOpen-webui7.7HIGHXSS Vulnerability in Open WebUI Affects Offline AI Platform
CVE-2026-44549Open-webuiOpen-webui7.3HIGHXSS Vulnerability in Open WebUI Affects User Profile Image Updates
CVE-2026-45299Open-webuiOpen-webui5.4MEDIUMStored Cross-Site Scripting in Open WebUI Banner Component
CVE-2026-45665Open-webuiOpen-webui8.1HIGHUnauthorized Access Flaw in Open WebUI AI Platform
CVE-2026-45667Open-webuiOpen-webui6.5MEDIUMDirectory Traversal Vulnerability in Open WebUI by Open WebUI
CVE-2026-44565Open-webuiOpen-webui8.1HIGHCross-Site Scripting Vulnerability in Open WebUI by Open WebUI
CVE-2026-45314Open-webuiOpen-webui7.4HIGHVulnerability in Open WebUI AI Platform Allows Unauthorized State Modification
CVE-2026-45316Open-webuiOpen-webui3.5LOWCross-Site Request Forgery in Open WebUI Affects Image Upload Functionality
CVE-2026-45317Open-webuiOpen-webui4.6MEDIUMXSS Vulnerability in Open WebUI Affects Self-Hosted AI Platforms
CVE-2026-45318Open-webuiOpen-webui5.4MEDIUMImproper File Handling in Open WebUI Affects Audio Transcription Endpoint
CVE-2026-45315Open-webuiOpen-webui8.7HIGHVulnerability in Open WebUI AI Platform Allows Unauthorized Message Updates
CVE-2026-44571Open-webuiOpen-webui6.5MEDIUMVulnerability in Open WebUI's Chat Completion API Allows Unauthorized Access
CVE-2026-45350Open-webuiOpen-webui7.1HIGHScript Injection Vulnerability in Open WebUI by Open WebUI
CVE-2026-45303Open-webuiOpen-webui7.7HIGHMissing Permission Check Vulnerability in Open WebUI by Open WebUI
CVE-2026-45301Open-webuiOpen-webui8.1HIGHImproper Access Control in Open WebUI AI Platform by Open WebUI
CVE-2026-45345Open-webuiOpen-webui6.5MEDIUMCross-Site Scripting Vulnerability in Open WebUI by Open WebUI
CVE-2026-45346Open-webuiOpen-webui5.1MEDIUMBlind Server-Side Request Forgery in Open WebUI Affecting Self-Hosted AI Platforms
CVE-2026-45347Open-webuiOpen-webui4.3MEDIUMInformation Disclosure in Open WebUI AI Platform by Open WebUI
CVE-2026-45351Open-webuiOpen-webui6.5MEDIUMAuthorization Flaw in Open WebUI AI Platform by Open WebUI
CVE-2026-45666Open-webuiOpen-webui6.5MEDIUMAccess Control Weakness in Open WebUI Platform
CVE-2026-45365Open-webuiOpen-webui5.4MEDIUMInconsistent Authorization Controls in Open WebUI Affecting User Data Management
CVE-2026-44570Open-webuiOpen-webui8.3HIGHIDOR Vulnerability in Open WebUI Self-Hosted AI Platform
CVE-2026-44569Open-webuiOpen-webui7.1HIGHFile Upload Vulnerability in Open WebUI by Open WebUI
CVE-2026-44566Open-webuiOpen-webui7.3HIGHUser Role Validation Flaw in Open WebUI AI Platform
CVE-2026-44567Open-webuiOpen-webui7.3HIGH