Vulnerabilities in open-webui
173 resultsCVE-2026-109300MEDIUMOpen WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call EmbedsEPSS 0.2%CVE-2026-109284MEDIUMOpen WebUI 0.11.0 before 0.11.4 Improper Authorization via Chat Fork EndpointEPSS 0.2%CVE-2026-45318MEDIUMOpen WebUI: Stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html} without DOMPurify)EPSS 0.2%CVE-2026-45299MEDIUMOpen WebUI: Stored Cross-Site Scripting In Profile PictureEPSS 0.2%CVE-2026-45365MEDIUMOpen WebUI: Authenticated users can bypass model access control via exposed query parameterEPSS 0.2%CVE-2026-44558MEDIUMOpen WebUI: Channel Access Grants Bypass filter_allowed_access_grantsEPSS 0.2%CVE-2026-45315HIGHOpen WebUI: Stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptionsEPSS 0.2%CVE-2026-45347MEDIUMOpen WebUI: Blind server side request forgery (SSRF) via the PDF generate functionEPSS 0.2%CVE-2026-44561MEDIUMOpen WebUI: Deactivated Channel Members Retain Full Access to Group/DM ChannelsEPSS 0.2%CVE-2026-44568MEDIUMOpen WebUI: Stored XSS in Pending User Overlay via Incorrect DOMPurify Application OrderEPSS 0.2%CVE-2026-45317MEDIUMOpen WebUI: Cross-Site Request Forgery (CSRF) via Image URL ManipulationEPSS 0.2%CVE-2026-45346MEDIUMOpen WebUI: Stored Cross-Site Scripting in SVG RendererEPSS 0.2%CVE-2026-109286HIGHOpen WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModalEPSS 0.1%