Description
open-webui before 0.3.14 contains a cross-origin resource sharing misconfiguration allowing arbitrary origins with allow_origins=* and authenticated requests to the /api/v1/functions endpoint. Attackers can execute arbitrary code on the openwebui instance by crafting malicious cross-site requests from attacker-controlled websites when an admin user visits them.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| open-webui | open-webui | < 0.3.14 | 0.3.14 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | open-webui | < 0.3.33 | 0.3.33 | GHSA-6xcp-7mpr-m7wm |
References
- GitHub Security Advisory (GHSA-6xcp-7mpr-m7wm) vendor-advisory
- VulnCheck Advisory: open-webui - Remote Code Execution via CORS Misconfiguration and Session Validation third-party-advisory