Vulnerabilities in open-webui

154 results
Vexday analysis

O volume de CVEs catalogadas para o Open-WebUI apresenta crescimento expressivo, com 77 das 115 vulnerabilidades registradas surgindo nos últimos 90 dias — sinal de que o produto está sob escrutínio crescente da comunidade de pesquisa de segurança. Nenhuma vulnerabilidade consta atualmente no catálogo KEV da CISA, o que coloca a taxa de exploração ativa abaixo da média geral do catálogo, embora isso não elimine o risco dado o número relevante de entradas recentes. O tipo de falha mais comum, CWE-862 (ausência de verificação de autorização), aponta para deficiências estruturais nos controles de acesso que merecem atenção prioritária em ambientes expostos. A CVE mais perigosa identificada atualmente é CVE-2024-7959, com escore EPSS de 0,2446, acompanhada de PoC pública disponível — condição que eleva concretamente a probabilidade de exploração e deve orientar a priorização de remediação.

CVE-2026-45350HIGHOpen WebUI: Chat completion API allows tool restrictions to be bypassedEPSS 0.3%CVE-2026-45399HIGHOpen WebUI: Low-privilege authenticated users can enumerate and stop global background tasks, causing system-wide chat disruptionEPSS 0.3%CVE-2026-45671HIGHOpen WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletionEPSS 0.3%CVE-2026-54015MEDIUMOpen WebUI: Prompt history IDOR: unbound history_id allows cross-prompt read and deletionEPSS 0.3%CVE-2026-70479HIGHOpen WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loaderEPSS 0.3%CVE-2026-44569HIGHOpen WebUI: Insecure Message Access Breaks AuthorizationEPSS 0.3%CVE-2026-70492HIGHOpen WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messagesEPSS 0.3%CVE-2026-59227MEDIUMOpen WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permissionEPSS 0.3%CVE-2026-29071LOWOpen WebUI's Insecure Direct Object Reference (IDOR) allows access to other users' memoriesEPSS 0.3%CVE-2026-70487MEDIUMOpen WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadataEPSS 0.3%CVE-2026-29070MEDIUMOpen WebUI has unauthorized deletion of knowledge filesEPSS 0.3%CVE-2026-45385MEDIUMOpen WebUI: An IDOR vulnerability exists in the update_message_by_id API endpointEPSS 0.3%CVE-2026-70484MEDIUMOpen WebUI: Users denied the image-generation permission can still generate images via chat completionsEPSS 0.2%CVE-2026-44563MEDIUMOpen WebUI: Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings, and /api/showEPSS 0.2%CVE-2025-65959HIGHOpen WebUI vulnerable to Stored DOM XSS via Note 'Download PDF'EPSS 0.2%CVE-2026-54007HIGHOpen WebUI: Cross-origin postMessage confirmation bypass via action:submitEPSS 0.2%CVE-2026-45349HIGHOpen WebUI: Broken Access Control for Completions APIEPSS 0.2%CVE-2026-44567HIGHOpen WebUI: Open WebUI Improper Authorization ControlEPSS 0.2%CVE-2026-70485HIGHOpen WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLsEPSS 0.2%CVE-2026-87995HIGHOpen WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-originEPSS 0.2%