Vulnerabilidades en open-webui
173 resultadosCVE-2026-54018HIGHOpen WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP RedirectsEPSS 0.4%CVE-2026-54019MEDIUMOpen WebUI: RAG ACL Bypass in Milvus Multitenancy ModeEPSS 0.4%CVE-2026-59223MEDIUMOpen WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matchingEPSS 0.4%CVE-2026-54009MEDIUMOpen WebUI: Cross-user file disclosure via /api/chat/completions image_url fieldEPSS 0.4%CVE-2026-70486HIGHOpen WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-originEPSS 0.4%CVE-2026-88001MEDIUMOpen WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targetsEPSS 0.4%CVE-2026-109299HIGHOpen WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule ValidationEPSS 0.4%CVE-2025-46571MEDIUMOpen WebUI vulnerable to limited stored XSS vila uploaded html fileEPSS 0.4%CVE-2026-59213LOWOpen WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)EPSS 0.4%CVE-2026-87017MEDIUMOpen WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backendsEPSS 0.4%CVE-2026-87994MEDIUMOpen WebUI: Channel members can overwrite another member's message via the chat completions endpointEPSS 0.4%CVE-2024-7048MEDIUMIDOR in open-webui/open-webuiEPSS 0.4%CVE-2026-87997MEDIUMOpen WebUI: Any authenticated user can inject chats into another user's folder via chat completionsEPSS 0.4%CVE-2026-59217MEDIUMOpen WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can add files to KB)EPSS 0.4%CVE-2026-88006MEDIUMOpen WebUI: Users denied by the OAuth role policy can still sign in via token exchangeEPSS 0.4%CVE-2026-109297HIGHOpen WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence RulesEPSS 0.4%CVE-2026-88005MEDIUMOpen WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchangeEPSS 0.4%CVE-2026-59225MEDIUMOpen WebUI: Arena task endpoints can bypass underlying model access controlsEPSS 0.4%CVE-2024-7041MEDIUMIDOR in open-webui/open-webuiEPSS 0.4%CVE-2026-44560MEDIUMOpen WebUI: Unauthorized File and Knowledge Base Content Access via RAG Vector SearchEPSS 0.4%