openwebui Vulnerability Advisory Catalog

Total 133 security vulnerabilities recorded for openwebui software and firmware.

← Back to All Vendors
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP and OAuth authentication f...

📅 2026-05-15
CVSS 8.1 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, any authenticated user can permanen...

📅 2026-05-15
CVSS 8.0 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, any authenticated user with low pri...

📅 2026-05-15
CVSS 7.1 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a user just needs to use the API en...

📅 2026-05-15
CVSS 7.1 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, Open WebUI allows admins to restric...

📅 2026-05-15
CVSS 6.5 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, validate_url() in backend/open_webu...

📅 2026-05-15
CVSS 8.5 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the AccountPending.svelte component...

📅 2026-05-15
CVSS 4.8 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the ydoc:document:update Socket.IO ...

📅 2026-05-15
CVSS 5.4 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the /api/generate, /api/embed, /api...

📅 2026-05-15
CVSS 5.4 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the POST /api/v1/models/import endp...

📅 2026-05-15
CVSS 6.5 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the is_user_channel_member function...

📅 2026-05-15
CVSS 5.4 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the type: "file" (non-full-context)...

📅 2026-05-15
CVSS 6.5 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the GET /api/v1/channels/{id}/membe...

📅 2026-05-15
CVSS 4.3 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the channel router does not call fi...

📅 2026-05-15
CVSS 5.4 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the _validate_collection_access fun...

📅 2026-05-15
CVSS 4.3 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the /responses endpoint in the Open...

📅 2026-05-15
CVSS 7.1 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, Open WebUI supports model compositi...

📅 2026-05-15
CVSS 7.6 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the POST /api/v1/retrieval/process/...

📅 2026-05-15
CVSS 8.1 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, administrative role changes and use...

📅 2026-05-15
CVSS 8.1 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the tool_servers and terminal_serve...

📅 2026-05-15
CVSS 8.7 Dossier →
CVE-2026-44551 CRITICAL
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP authentication endpoint do...

📅 2026-05-15
CVSS 9.1 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, FolderForm uses model_config = Conf...

📅 2026-05-15
CVSS 5.0 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.7.2 and below contain a Blind Server Sid...

📅 2026-04-14
CVSS 4.3 Dossier →
Component: open_webui

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.8.11, there is a broken access c...

📅 2026-04-01
CVSS 7.7 Dossier →
Page 4 of 6 (133 Total Records)