open-webui vulnerabilities

CVEs whose affected-version data names the open-webui package (npm, pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

open-webui vulnerabilities

Open WebUI's Improper Authorization in Standard Channels Allows Message Updates with Read Permission

Open WebUI Arbitrary File Write, Delete via Path Traversal

Open WebUI has inconsistent authorization controls within memories API

Read-Only Open WebUI Users Can Modify Collaborative Documents via Socket.IO

Open WebUI's Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings, and /api/show

Open WebUI's Model Import Overwrites Any Model Without Ownership Check

Open WebUI has stored XSS in Excel file preview

Open WebUI's Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts

Open WebUI's responses passthrough endpoint lacks access control authorization

Open WebUI: Deactivated Channel Members Retain Full Access to Group/DM Channels

Open WebUI has Unauthorized File and Knowledge Base Content Access via RAG Vector Search

open-webui Vulnerable to Stored XSS via Model Description

Open WebUI has Stored XSS in Pending User Overlay via Incorrect DOMPurify Application Order

Open WebUI Missing Access Check on Channel Members Endpoint for Standard Channels

Open WebUI's Base Model Routing Bypasses Access Control via Model Chaining

Open WebUI Vulnerable to Arbitrary File Upload and Path Traversal

Open WebUI's Channel Access Grants Bypass filter_allowed_access_grants

Open WebUI has Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection Overwrite

Open WebUI vulnerable to Global Knowledge Base Enumeration via knowledge-bases Meta-Collection

Open WebUI has Improper Authorization Control

Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access

Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning

Open WebUI has Broken Access Control in Tool Valves

Open WebUI's Insecure Direct Object Reference (IDOR) allows access to other users' memories

Open WebUI vulnerable to Path Traversal in `POST /api/v1/audio/transcriptions`

Open WebUI's process_files_batch() endpoint missing ownership check, allows unauthorized file overwrite

Open WebUI has unauthorized deletion of knowledge files

open-webui is Vulnerable to Incorrect Access Control

Open WebUI vulnerable to Server-Side Request Forgery (SSRF) via Arbitrary URL Processing in /api/v1/retrieval/process/web

Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE