Vulnerabilities in Open WebUI

5 results

CVE-2026-0766HIGHOpen WebUI load_tool_module_by_id Command Injection Remote Code Execution VulnerabilityEPSS 27.2%CVE-2026-0765HIGHOpen WebUI PIP install_frontmatter_requirements Command Injection Remote Code Execution VulnerabilityEPSS 1.7%CVE-2024-6707HIGHOpen WebUI Arbitrary File Upload + Path TraversalEPSS 1.0%CVE-2024-6706MEDIUMOpen WebUI Stored Cross-Site ScriptingEPSS 0.6%CVE-2026-0767MEDIUMOpen WebUI Cleartext Transmission of Credentials Information Disclosure VulnerabilityEPSS 0.2%