Vulnerabilities in open-webui
173 resultsCVE-2026-59215LOWOpen WebUI: Private channel messages can be disclosed through cross-channel thread parent_id bindingEPSS 0.3%CVE-2026-44549HIGHOpen WebUI: Stored XSS in excel file previewEPSS 0.3%CVE-2026-109290HIGHOpen WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX PreviewEPSS 0.3%CVE-2026-45339MEDIUMOpen WebUI: API key endpoint restrictions bypassed via `x-api-key` header — full message processing on restricted endpointsEPSS 0.3%CVE-2026-44721HIGHOpen WebUI: Stored XSS via Model DescriptionEPSS 0.3%CVE-2026-45396MEDIUMOpen WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data ManipulationEPSS 0.3%CVE-2026-109294HIGHOpen WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote ImageEPSS 0.3%CVE-2026-44556HIGHOpen WebUI: responses passthrough endpoint lacks access control authorizationEPSS 0.3%CVE-2026-44552HIGHOpen WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache PoisoningEPSS 0.3%CVE-2026-54016MEDIUMOpen WebUI: Open WebUI BOLA: `search_knowledge_files` Allows Unauthorized Knowledge Base File EnumerationEPSS 0.3%CVE-2026-44555HIGHOpen WebUI: Base Model Routing Bypasses Access Control via Model ChainingEPSS 0.3%CVE-2026-45401HIGHOpen WebUI: SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load EndpointsEPSS 0.3%CVE-2026-54013HIGHOpen WebUI: Stored XSS to Account Takeover via Model Profile Images in Open WebUIEPSS 0.3%CVE-2026-54006MEDIUMOpen WebUI: Calendar event re-parenting allows writing events into another user's calendarEPSS 0.3%CVE-2026-109572HIGHOpen WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal ProxyEPSS 0.3%CVE-2026-44554HIGHOpen WebUI: Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection OverwriteEPSS 0.3%CVE-2026-44570HIGHOpen WebUI: Inconsistent authorization controls within memories APIEPSS 0.3%CVE-2026-45400HIGHOpen WebUI: Server-Side Request Forgery (SSRF) bypass in `validate_url`EPSS 0.3%CVE-2026-34225MEDIUMOpen WebUI has Blind Server Side Request Forgery in its Image Edit FunctionalityEPSS 0.3%CVE-2026-109288HIGHOpen WebUI before 0.11.4 Stored XSS via javascript: URLs in Markdown LinksEPSS 0.3%