Skip to content
OpenAdvisories

Vendor

open-webui

175 known vulnerabilities.

Products

open-webui 167 open-webui/open-webui 8
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.7
    CVE-2026-54017 Public exploit

    Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal

    Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, the terminal-server reverse proxy in `backend/open_webui/routers/terminals.py` does not fully confine the user-controlled `path` segment before …

    open-webui open-webui open-webui PyPI
  • High 8.5
    CVE-2026-45401 Public exploit

    Open WebUI: SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints

    Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the validate_url() function in backend/open_webui/retrieval/web/utils.py only validates the initial URL submitted by the caller. The HTTP client…

    open-webui open-webui open-webui PyPI
  • High 8.7
    CVE-2025-64495 Public exploit

    Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE

    Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. In versions 0.6.34 and below, the functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is e…

    open-webui open-webui open-webui open-webui npm PyPI