Vulnerabilidades em open-webui

154 resultados
Análise Vexday

O volume de CVEs catalogadas para o Open-WebUI apresenta crescimento expressivo, com 77 das 115 vulnerabilidades registradas surgindo nos últimos 90 dias — sinal de que o produto está sob escrutínio crescente da comunidade de pesquisa de segurança. Nenhuma vulnerabilidade consta atualmente no catálogo KEV da CISA, o que coloca a taxa de exploração ativa abaixo da média geral do catálogo, embora isso não elimine o risco dado o número relevante de entradas recentes. O tipo de falha mais comum, CWE-862 (ausência de verificação de autorização), aponta para deficiências estruturais nos controles de acesso que merecem atenção prioritária em ambientes expostos. A CVE mais perigosa identificada atualmente é CVE-2024-7959, com escore EPSS de 0,2446, acompanhada de PoC pública disponível — condição que eleva concretamente a probabilidade de exploração e deve orientar a priorização de remediação.

CVE-2026-45345MEDIUMOpen WebUI: Missing authorization check at the model update function - models from other users can be updatedEPSS 0.2%CVE-2026-45303HIGHOpen WebUI: Stored XSS via the HTML renedering viewEPSS 0.2%CVE-2026-87999HIGHOpen WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetchEPSS 0.2%CVE-2026-59715LOWOpen WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave)EPSS 0.2%CVE-2026-44557MEDIUMOpen WebUI: Global Knowledge Base Enumeration via knowledge-bases Meta-CollectionEPSS 0.2%CVE-2026-44559MEDIUMOpen WebUI: Missing Access Check on Channel Members Endpoint for Standard ChannelsEPSS 0.2%CVE-2026-45387MEDIUMOpen WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt leakage)EPSS 0.2%CVE-2026-44564MEDIUMOpen WebUI: Read-Only Users Can Modify Collaborative Documents via Socket.IOEPSS 0.2%CVE-2026-45314HIGHOpen WebUI: XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/imageEPSS 0.2%CVE-2026-45316LOWOpen WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access)EPSS 0.2%CVE-2026-88006MEDIUMOpen WebUI: Users denied by the OAuth role policy can still sign in via token exchangeEPSS 0.2%CVE-2026-87997MEDIUMOpen WebUI: Any authenticated user can inject chats into another user's folder via chat completionsEPSS 0.2%CVE-2026-87994MEDIUMOpen WebUI: Channel members can overwrite another member's message via the chat completions endpointEPSS 0.2%CVE-2026-87017MEDIUMOpen WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backendsEPSS 0.2%CVE-2026-88005MEDIUMOpen WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchangeEPSS 0.2%CVE-2026-54020MEDIUMOpen WebUI: DNS Rebinding SSRF BypassEPSS 0.2%CVE-2026-70488MEDIUMOpen WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanupEPSS 0.2%CVE-2026-59225MEDIUMOpen WebUI: Arena task endpoints can bypass underlying model access controlsEPSS 0.2%CVE-2026-87996HIGHOpen WebUI: SSRF into internal services via DNS rebinding in the Playwright web loaderEPSS 0.2%CVE-2026-45318MEDIUMOpen WebUI: Stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html} without DOMPurify)EPSS 0.2%