Skip to content
OpenAdvisories

Vendor

open-webui

175 known vulnerabilities.

Products

open-webui 167 open-webui/open-webui 8
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-44551 Scanner template

    Open WebUI: LDAP Empty Password Authentication Bypass

    Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP authentication endpoint does not validate that the submitted password is non-empty before performing a Simple Bind against the LDAP ser…

    open-webui open-webui open-webui PyPI
  • Critical 9.0
    CVE-2024-8017

    Cross-site Scripting (XSS) in open-webui/open-webui

    An XSS vulnerability exists in open-webui/open-webui versions <= 0.3.8, specifically in the function that constructs the HTML for tooltips. This vulnerability allows attackers to perform operations with the victim's privileges, such as stealing chat history, …

    open-webui open-webui/open-webui