open-webui vulnerabilities

CVEs whose affected-version data names the open-webui package (npm, pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

open-webui vulnerabilities

Open WebUI has Improper Authorization Control

Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access

Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning

Open WebUI has Broken Access Control in Tool Valves

Open WebUI's Insecure Direct Object Reference (IDOR) allows access to other users' memories

Open WebUI vulnerable to Path Traversal in `POST /api/v1/audio/transcriptions`

Open WebUI's process_files_batch() endpoint missing ownership check, allows unauthorized file overwrite

Open WebUI has unauthorized deletion of knowledge files

open-webui is Vulnerable to Incorrect Access Control

Open WebUI vulnerable to Server-Side Request Forgery (SSRF) via Arbitrary URL Processing in /api/v1/retrieval/process/web

Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE

Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events

Open WebUI has SSRF in /openai/models

Open WebUI Uncontrolled Resource Consumption vulnerability

Open WebUI Allows Admin Deletion via API Endpoint

Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF)

Open WebUI Allows Arbitrary File Reading and Deletion

Open WebUI Vulnerable to Cross-Site Scripting (XSS) via Chat File Upload

Open WebUI Allows Viewing of Admin Details

Open WebUI stored cross-site scripting (XSS) vulnerability

Open WebUI Uncontrolled Resource Consumption vulnerability

Open WebUI allows Remote Code Execution via Arbitrary File Upload to /audio/api/v1/transcriptions

Open WebUI Allows Arbitrary File Write via the `/models/upload` Endpoint

Open WebUI Uncontrolled Resource Consumption vulnerability

Open WebUI Has Improper Access Control Leading to Arbitrary Prompt Read

Open WebUI lacks authentication for the `api/v1/utils/pdf` endpoint

Open WebUI Cross-Site Request Forgery (CSRF) Vulnerability

Open WebUI denial of service through endpoint for converting markdown

Open WebUI Vulnerable to a Session Fixation Attack

Open WebUI Allows Arbitrary File Write via the `download_model` Endpoint