open-webui

18 known vulnerabilities in open-webui, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-88006 CVSS 6.5 medium Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.1, Open WebUI's OAuth token…
  • CVE-2026-88005 CVSS 6.5 medium Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.9.0, Open WebUI's OAuth token…
  • CVE-2026-88002 CVSS 6.5 medium Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.1, the message-chain…
  • CVE-2026-88001 CVSS 5.0 medium Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 until 0.11.1, server-side web fetches did…
  • CVE-2026-88000 CVSS 6.5 medium Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE…
  • CVE-2026-87999 CVSS 7.1 high Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.1, POST /api/v1/retrieval/process/web…
  • CVE-2026-87998 CVSS 7.1 high Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE…
  • CVE-2026-87997 CVSS 4.3 medium Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /api/chat/completions…
  • CVE-2026-87996 CVSS 7.7 high Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.1, SafePlaywrightURLLoader in…
  • CVE-2026-87995 CVSS 8.7 high Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.11 until 0.11.1…
  • CVE-2026-87994 CVSS 4.3 medium Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 until 0.11.1, the channel branch of…
  • CVE-2026-87017 CVSS 4.3 medium Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.1, the built-in knowledge…
  • CVE-2026-87016 CVSS 8.1 high Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.41 until 0.11.1, get_user_by_oauth_sub and…
  • CVE-2026-87015 CVSS 6.8 medium Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 until 0.11.1…
  • CVE-2026-87014 CVSS 6.5 medium Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, role synchronization in…
  • CVE-2026-87013 CVSS 4.3 medium Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST…
  • CVE-2026-87012 CVSS 4.3 medium Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1…
  • CVE-2026-87011 CVSS 7.5 high Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, the unauthenticated POST…