Openwebui

Open Webui

142 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.4

CVE-2026-54015

Exploit
  • EPSS 0.2%
  • Veröffentlicht 23.06.2026 16:44:57
  • Zuletzt bearbeitet 25.06.2026 14:35:30

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI's prompt version-history endpoints authorize the prompt_id in the URL but then act on caller-supplied history IDs without ve...

4.3

CVE-2026-54016

Exploit
  • EPSS 0.26%
  • Veröffentlicht 23.06.2026 16:43:13
  • Zuletzt bearbeitet 25.06.2026 14:31:06

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI has a Broken Object Level Authorization (BOLA) vulnerability in the builtin search_knowledge_files tool. When native functio...

7.7

CVE-2026-54018

Exploit
  • EPSS 0.34%
  • Veröffentlicht 23.06.2026 16:42:00
  • Zuletzt bearbeitet 25.06.2026 14:30:18

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, the SafePlaywrightURLLoader implements a validate_url function to prevent SSRF attacks by checking the IP address of the user-provided ...

6.5

CVE-2026-54019

Exploit
  • EPSS 0.34%
  • Veröffentlicht 23.06.2026 16:41:18
  • Zuletzt bearbeitet 25.06.2026 14:27:13

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI added collection-level ACL checks, but the patch can still be bypassed when Milvus multitenancy mode is enabled. The ACL all...

6.3

CVE-2026-54021

  • EPSS 0.21%
  • Veröffentlicht 23.06.2026 16:39:58
  • Zuletzt bearbeitet 26.06.2026 20:17:26

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, several direct, index-addressed Ollama proxy routes accept a caller-supplied url_idx path parameter and use it as a raw index into the ...

5.3

CVE-2026-54022

Exploit
  • EPSS 0.32%
  • Veröffentlicht 23.06.2026 16:38:13
  • Zuletzt bearbeitet 25.06.2026 14:12:50

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, the ydoc:document:join Socket.IO handler checks note ownership only when the document_id starts with note: (colon). However, the YdocM...

7.7

CVE-2026-54017

  • EPSS 0.52%
  • Veröffentlicht 18.06.2026 21:09:07
  • Zuletzt bearbeitet 24.06.2026 19:04:33

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, the terminal-server reverse proxy in `backend/open_webui/routers/terminals.py` does not fully confine the user-controlled `path` segmen...

7.7

CVE-2026-45338

Exploit
  • EPSS 0.4%
  • Veröffentlicht 15.05.2026 21:46:32
  • Zuletzt bearbeitet 18.05.2026 19:33:34

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a Server-Side Request Forgery (SSRF) vulnerability exists in _process_picture_url() in backend/open_webui/utils/oauth.py (line ~1338). ...

8.7

CVE-2026-44549

Exploit
  • EPSS 0.32%
  • Veröffentlicht 15.05.2026 21:45:16
  • Zuletzt bearbeitet 19.05.2026 16:38:53

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, Excel file attachments are previewed in an unsafe way. A crafted XLSX file payload can be used to cause the sheetjs function sheet_to_h...

5.4

CVE-2026-45299

  • EPSS 0.2%
  • Veröffentlicht 15.05.2026 21:44:17
  • Zuletzt bearbeitet 18.05.2026 19:50:48

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, the profile_image_url field on the user profile update form accepted arbitrary data: URI values without MIME-type validation, resulting...