open-webui

8 results · Feed

• High 8.1
  CVE-2026-45665

  Open WebUI: Stored XSS in Banner Component via Improper Sanitization Order

  Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, a Stored Cross-Site Scripting (XSS) vulnerability exists in the Banner component due to an improper sanitization order (specifically, DOMPurify …

  open-webui open-webui open-webui npm
  May 15, 2026
• Medium 5.1
  CVE-2026-45346

  Open WebUI: Stored Cross-Site Scripting in SVG Renderer

  Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.31, there is a Cross-Site Scripting vulnerability in Open WebUI SVG renderer implementation. This vulnerability is fixed in 0.6.31.

  open-webui open-webui open-webui npm
  May 15, 2026
• High 7.2
  CVE-2026-45395

  Open WebUI: Missing `workspace.tools` Authorization Check on Tool Update Endpoint Allows Privilege Escalation to Code Execution

  Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the tool update endpoint (POST /api/v1/tools/id/{id}/update) is missing the workspace.tools permission check that is present on the tool create …

  open-webui open-webui open-webui npm
  May 15, 2026
• High 7.3
  CVE-2026-44721

  Open WebUI: Stored XSS via Model Description

  Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a stored cross-site scripting (XSS) vulnerability that allows any authenticated user with model creation permission (workspace.models) to execut…

  open-webui open-webui open-webui open-webui npm PyPI
  May 15, 2026
• High 8.7
  CVE-2025-65959

  Open WebUI vulnerable to Stored DOM XSS via Note 'Download PDF'

  Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.37, a Stored XSS vulnerability was discovered in Open-WebUI's Notes PDF download functionality. An attacker can import a Markdown file containing m…

  open-webui open-webui open-webui npm
  Dec 4, 2025
• High 7.3
  CVE-2025-64496

  Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events

  Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.6.224 and prior contain a code injection vulnerability in the Direct Connections feature that allows malicious external model servers to execute arbi…

  open-webui open-webui open-webui open-webui npm PyPI
  Nov 8, 2025
• High 8.7
  CVE-2025-64495 Public exploit

  Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE

  Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. In versions 0.6.34 and below, the functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is e…

  open-webui open-webui open-webui open-webui npm PyPI
  Nov 8, 2025
• High 7.5
  GHSA-5ccf-884p-4jjq

  Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability

  A Denial of Service (DoS) vulnerability exists in open-webui/open-webui version 0.3.21. This vulnerability affects multiple endpoints, including `/ollama/models/upload`, `/audio/api/v1/transcriptions`, and `/rag/api/v1/doc`. The application processes multipar…

  open-webui open-webui npm PyPI
  Mar 20, 2025