{"id":"CVE-2024-7034","aliases":["GHSA-crh6-pj8c-xrhc","PYSEC-2026-1730"],"title":"Open WebUI Allows Arbitrary File Write via the `/models/upload` Endpoint","summary":"Open WebUI Allows Arbitrary File Write via the `/models/upload` Endpoint","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","vendor":"open-webui","product":"open-webui","ecosystem":"pip","affected":["open-webui <= 0.3.8"],"published":"2025-03-20","updated":"2026-07-07","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-crh6-pj8c-xrhc","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7034"},{"url":"https://github.com/open-webui/open-webui"},{"url":"https://huntr.com/bounties/711beada-10fe-4567-9278-80a689da8613"}],"tags":["osv","pip"],"epss":0.02458,"epssPercentile":0.8261,"ingestedAt":"2026-07-08T18:25:48.563Z","slug":"CVE-2024-7034","body":"## Overview\n\nIn open-webui version 0.3.8, the endpoint `/models/upload` is vulnerable to arbitrary file write due to improper handling of user-supplied filenames. The vulnerability arises from the usage of `file_path = f\"{UPLOAD_DIR}/{file.filename}\"` without proper input validation or sanitization. An attacker can exploit this by manipulating the `file.filename` parameter to include directory traversal sequences, causing the resulting `file_path` to escape the intended `UPLOAD_DIR` and potentially overwrite arbitrary files on the system. This can lead to unauthorized modifications of system binaries, configuration files, or sensitive data, potentially enabling remote command execution.\n\n## Affected packages\n\n- `open-webui <= 0.3.8`\n\n## Remediation\n\nRefer to the advisory for the patched release.","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0.5,"exploitation":0,"ransomware":0},"changes":[]}