Description
Open WebUI 0.11.0 before 0.11.4 compiles user-chosen grep patterns for its knowledge and chat file search tools with a regex engine that expands nested counted repetition unbounded at compile time and caches the result. Authenticated users can have the model call grep_knowledge_files with short nested-repetition patterns, blocking the event loop and exhausting worker memory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| open-webui | open-webui | 0.11.0 – < 0.11.4 | 0.11.4 |
References
- GitHub Security Advisory (GHSA-gww9-mhgj-pfqh) vendor-advisory
- Patch Commit patch
- VulnCheck Advisory: Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regex third-party-advisory