openwebui Vulnerability Advisory Catalog

Total 133 security vulnerabilities recorded for openwebui software and firmware.

← Back to All Vendors
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI's prompt version-history...

📅 2026-06-23
CVSS 6.4 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, a path traversal vulnerability exis...

📅 2026-06-23
CVSS 4.3 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI patched SVG XSS in user ...

📅 2026-06-23
CVSS 7.6 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI lets a user who can crea...

📅 2026-06-23
CVSS 7.1 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6,Open WebUI renders Mermaid blocks fr...

📅 2026-06-23
CVSS 8.7 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI lets an authenticated us...

📅 2026-06-23
CVSS 8.3 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, POST /api/chat/completions accepts ...

📅 2026-06-23
CVSS 6.5 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, backend/open_webui/utils/oauth.py::...

📅 2026-06-23
CVSS 8.5 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, the chat message listener allows no...

📅 2026-06-23
CVSS 6.5 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, POST /api/v1/calendars/events/{even...

📅 2026-06-23
CVSS 4.3 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, the terminal-server reverse proxy i...

📅 2026-06-18
CVSS 7.7 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, GET /api/v1/memories/ef is accessib...

📅 2026-05-15
CVSS 6.5 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, the API /api/v1/notes/{note_id} en...

📅 2026-05-15
CVSS 6.5 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, a Stored Cross-Site Scripting (XSS)...

📅 2026-05-15
CVSS 8.1 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, an internal-only bypass_filter par...

📅 2026-05-15
CVSS 5.4 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.9, when a regular user [non-admin] log...

📅 2026-05-15
CVSS 6.5 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, there is a vulnerability in chat co...

📅 2026-05-15
CVSS 7.1 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.5.11, there is a blind server side reque...

📅 2026-05-15
CVSS 4.3 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.31, there is a Cross-Site Scripting vu...

📅 2026-05-15
CVSS 5.4 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.5.7, a user can modify another user's mo...

📅 2026-05-15
CVSS 6.5 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a Server-Side Request Forgery (SSRF...

📅 2026-05-15
CVSS 7.7 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, his advisory tracks a regression of...

📅 2026-05-15
CVSS 5.4 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, an application-wide Cross-Site Requ...

📅 2026-05-15
CVSS 4.6 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the POST /api/v1/notes/{id}/pin end...

📅 2026-05-15
CVSS 3.5 Dossier →
Page 2 of 6 (133 Total Records)