Vulnerabilidades en open-webui
173 resultadosCVE-2026-70483LOWOpen WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpointEPSS 0.5%CVE-2026-44565HIGHOpen WebUI: Open WebUI Arbitrary File Write, Delete via Path TraversalEPSS 0.5%CVE-2026-56399MEDIUMOpen WebUI - Server-Side Request Forgery via Location Redirect in /api/v1/retrieval/process/webEPSS 0.5%CVE-2026-59216HIGHOpen WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_idEPSS 0.5%CVE-2026-45395HIGHOpen WebUI: Missing `workspace.tools` Authorization Check on Tool Update Endpoint Allows Privilege Escalation to Code ExecutionEPSS 0.4%CVE-2026-70481MEDIUMOpen WebUI: Any member with write access to a standard channel can edit or delete other members' messagesEPSS 0.4%CVE-2026-59214HIGHOpen WebUI: Stored web worker XSS via PyodideEPSS 0.4%CVE-2026-59212MEDIUMOpen WebUI: Model meta.knowledge read-only file access can be upgraded to file write/deleteEPSS 0.4%CVE-2026-59227MEDIUMOpen WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permissionEPSS 0.4%CVE-2026-54010HIGHOpen WebUI: Forged chat-file link allows cross-user file read and deletionEPSS 0.4%CVE-2026-87995HIGHOpen WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-originEPSS 0.4%CVE-2026-70487MEDIUMOpen WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadataEPSS 0.4%CVE-2026-59218MEDIUMOpen WebUI: Account enumeration via observable login timing discrepancyEPSS 0.4%CVE-2026-70484MEDIUMOpen WebUI: Users denied the image-generation permission can still generate images via chat completionsEPSS 0.4%CVE-2024-30256MEDIUMOpen WebUI vulnerable to server-side request forgery in utils.pyEPSS 0.4%CVE-2026-109292HIGHOpen WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode ConnectionsEPSS 0.4%CVE-2026-45672HIGHOpen WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassedEPSS 0.4%CVE-2026-70492HIGHOpen WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messagesEPSS 0.4%CVE-2026-45338HIGHOpen WebUI: SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)EPSS 0.4%CVE-2026-59224HIGHOpen WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id header and ws_terminal session_id query injection)EPSS 0.4%