---
id: CVE-2024-8060
aliases:
  - GHSA-ff5c-56m7-vc75
  - PYSEC-2026-1731
title: >-
  Open WebUI allows Remote Code Execution via Arbitrary File Upload to
  /audio/api/v1/transcriptions
summary: >-
  Open WebUI allows Remote Code Execution via Arbitrary File Upload to
  /audio/api/v1/transcriptions
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H'
vendor: open-webui
product: open-webui
ecosystem: pip
affected:
  - open-webui < 0.5.17
patched:
  - open-webui 0.5.17
published: '2025-03-20'
updated: '2026-07-07'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-ff5c-56m7-vc75'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2024-8060'
  - url: >-
      https://github.com/open-webui/open-webui/commit/613a087387c094e71ee91d29c015195ef401e160
  - url: 'https://github.com/open-webui/open-webui'
  - url: 'https://huntr.com/bounties/a3b1a4b7-c723-496d-842c-844cc0988fe9'
tags:
  - osv
  - pip
epss: 0.00902
epssPercentile: 0.56577
ingestedAt: '2026-07-08T18:25:48.870Z'
---

## Overview

OpenWebUI version 0.3.0 contains a vulnerability in the audio API endpoint `/audio/api/v1/transcriptions` that allows for arbitrary file upload. The application performs insufficient validation on the `file.content_type` and allows user-controlled filenames, leading to a path traversal vulnerability. This can be exploited by an authenticated user to overwrite critical files within the Docker container, potentially leading to remote code execution as the root user.

## Affected packages

- `open-webui < 0.5.17`

## Remediation

Upgrade to a patched release:

- `open-webui 0.5.17`