Vulnerabilities in open-webui
173 resultsCVE-2026-28786MEDIUMOpen WebUI vulnerable to Path Traversal in `POST /api/v1/audio/transcriptions`EPSS 0.6%CVE-2026-70482HIGHOpen WebUI: Account takeover via OAuth token exchange accepting tokens issued to any clientEPSS 0.6%CVE-2026-59219HIGHOpen WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logoutEPSS 0.6%CVE-2026-70494HIGHOpen WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolderEPSS 0.5%CVE-2024-7044MEDIUMStored XSS in open-webui/open-webuiEPSS 0.5%CVE-2026-59226LOWOpen WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocationEPSS 0.5%CVE-2026-54017HIGHOpen WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversalEPSS 0.5%CVE-2026-56400CRITICALopen-webui - Remote Code Execution via CORS Misconfiguration and Session ValidationEPSS 0.5%CVE-2026-87014MEDIUMOpen WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notesEPSS 0.5%CVE-2025-64495HIGHOpen WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCEEPSS 0.5%CVE-2026-87998HIGHOpen WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletionEPSS 0.5%CVE-2026-87012MEDIUMOpen WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert valueEPSS 0.5%CVE-2026-87013MEDIUMOpen WebUI: Any authenticated user can start a non-terminating request via a folder parent cycleEPSS 0.5%CVE-2026-59221HIGHopen-webui terminal proxy path traversal guard bypass via 9x encoded traversalEPSS 0.5%CVE-2026-70491MEDIUMOpen WebUI: Tool source code disclosed to read-only users via the tool list and get endpointsEPSS 0.5%CVE-2026-87015MEDIUMOpen WebUI: A user's session cookies are sent to tool servers configured for bearer authenticationEPSS 0.5%CVE-2026-59714HIGHOpen WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel message_ids)EPSS 0.5%CVE-2026-109298HIGHOpen WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search RegexEPSS 0.5%CVE-2026-70479HIGHOpen WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loaderEPSS 0.5%CVE-2026-59222MEDIUMOpen WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentialsEPSS 0.5%