Vulnerabilities
Last updated 2 hours ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
open-webui
|
Open WebUI's API key endpoint restrictions bypassed via `x-api-key` header — full message processing on restricted endpoints | Medium Risk 6.5 | 5 months ago | 13 hours ago |
|
open-webui
|
Open WebUI Stored Cross-Site Scripting Vulnerability | Medium Risk 6.1 | 2 years ago | 8 days ago |
|
open-webui
|
Open WebUI has vulnerable dependency on starlette via fastapi | High Risk 7.5 | 1 year ago | 8 days ago |
|
open-webui
|
open-webui Insecure Direct Object Reference (IDOR) vulnerability | Medium Risk 6.5 | 2 years ago | 8 days ago |
|
open-webui
|
Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions | Medium Risk 4.3 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange | Medium Risk 6.5 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch | High Risk 7.1 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader | High Risk 7.7 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion | High Risk 7.1 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint | Medium Risk 4.3 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication | Medium Risk 6.8 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin | High Risk 8.7 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange | Medium Risk 6.5 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes | Medium Risk 6.5 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle | Medium Risk 4.3 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite | High Risk 8.1 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value | Medium Risk 4.3 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout | High Risk 7.5 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends | Medium Risk 4.3 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin | High Risk 8.7 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication | Medium Risk 6.8 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends | Medium Risk 4.3 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes | Medium Risk 6.5 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange | Medium Risk 6.5 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint | Medium Risk 4.3 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value | Medium Risk 4.3 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite | High Risk 8.1 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions | Medium Risk 4.3 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion | High Risk 7.1 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader | High Risk 7.7 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch | High Risk 7.1 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout | High Risk 7.5 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange | Medium Risk 6.5 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle | Medium Risk 4.3 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Any authenticated user can hang the server via a cyclic chat message history | Medium Risk 6.5 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree | Medium Risk 6.5 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets | Medium Risk 5.0 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree | Medium Risk 6.5 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets | Medium Risk 5.0 | 1 month ago | 1 month ago |
|
open-webui
|
Open WebUI: Any authenticated user can hang the server via a cyclic chat message history | Medium Risk 6.5 | 1 month ago | 1 month ago |
|
open-webui
|
open-webui allows writing and deleting arbitrary files | Medium Risk 6.5 | 2 years ago | 1 month ago |
|
open-webui
|
Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-origin | High Risk 8.2 | 3 months ago | 2 months ago |
|
open-webui
|
Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing | Medium Risk 6.5 | 3 months ago | 2 months ago |
|
open-webui
|
Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader | High Risk 7.7 | 3 months ago | 2 months ago |
|
open-webui
|
Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs | High Risk 7.1 | 3 months ago | 2 months ago |
|
open-webui
|
Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client | High Risk 8.1 | 3 months ago | 2 months ago |
|
open-webui
|
Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role check | Medium Risk 6.3 | 3 months ago | 2 months ago |
|
open-webui
|
Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages | Medium Risk 5.4 | 3 months ago | 2 months ago |
|
open-webui
|
Open WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpoint | Low Risk 3.1 | 3 months ago | 2 months ago |
|
open-webui
|
Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages | High Risk 8.7 | 3 months ago | 2 months ago |
Page 1