Vulnerability index

Browse CVEs

116 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Open Webui HIGH 8.1
CVE-2026-45665

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, a Stored Cross-Site Scripting (XSS…

Fix: 0.8.0+
Fix from $1,950 2026-05-15
Open Webui HIGH 7.1
CVE-2026-45350

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, there is a vulnerability in chat c…

Fix: 0.8.6+
Fix from $1,950 2026-05-15
Open Webui MEDIUM 6.5
CVE-2026-45351

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.9, when a regular user [non-admin] lo…

Fix: 0.8.9+
Fix from $1,600 2026-05-15
Open Webui MEDIUM 5.4
CVE-2026-45346

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.31, there is a Cross-Site Scripting v…

Fix: 0.6.31+
Fix from $1,600 2026-05-15
Open Webui MEDIUM 5.4
CVE-2026-45347

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.5.11, there is a blind server side requ…

Fix: 0.5.11+
Fix from $1,600 2026-05-15
Open Webui MEDIUM 5.4
CVE-2026-45365

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, an internal-only bypass_filter pa…

Fix: 0.8.11+
Fix from $1,600 2026-05-15
Open Webui HIGH 8.7
CVE-2026-45315

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the audio transcription upload end…

Fix: 0.9.3+
Fix from $1,950 2026-05-15
Open Webui HIGH 7.7
CVE-2026-45338

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a Server-Side Request Forgery (SSR…

Fix: 0.9.0+
Fix from $1,950 2026-05-15
Open Webui MEDIUM 6.5
CVE-2026-45345

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.5.7, a user can modify another user's m…

Fix: 0.5.7+
Fix from $1,600 2026-05-15
Open Webui MEDIUM 6.1
CVE-2026-45314

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the channel webhook create/update …

Fix: 0.9.3+
Fix from $1,600 2026-05-15
Open Webui MEDIUM 5.4
CVE-2026-45318

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, his advisory tracks a regression o…

Fix: 0.9.3+
Fix from $1,600 2026-05-15
Open Webui HIGH 8.3
CVE-2026-44570

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.19, authorization controls surroundin…

Fix: 0.6.19+
Fix from $1,950 2026-05-15
Open Webui HIGH 8.1
CVE-2026-45301

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.3.16, a missing permission check in all…

Fix: 0.3.16+
Fix from $1,950 2026-05-15
Open Webui HIGH 7.7
CVE-2026-45303

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.5, through the HTML rendering view, s…

Fix: 0.6.5+
Fix from $1,950 2026-05-15
Open Webui HIGH 7.3
CVE-2026-44567

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.1.124, the API does not properly valida…

Fix: 0.1.124+
Fix from $1,950 2026-05-15
Open Webui HIGH 7.1
CVE-2026-44569

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.19, there's an IDOR in the channels m…

Fix: 0.6.19+
Fix from $1,950 2026-05-15
Open Webui MEDIUM 6.5
CVE-2026-44571

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, in standard channels (i.e., channe…

Fix: 0.8.6+
Fix from $1,600 2026-05-15
Open Webui MEDIUM 5.4
CVE-2026-45299

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, the profile_image_url field on the…

Fix: 0.8.0+
Fix from $1,600 2026-05-15
Open Webui CRITICAL 9.8
CVE-2026-44566

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.1.124, when attaching files to a promp,…

Fix: 0.1.124+
Fix from $2,300 2026-05-15
Open Webui HIGH 8.7
CVE-2026-44549

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, Excel file attachments are preview…

Fix: 0.8.0+
Fix from $1,950 2026-05-15
Open Webui HIGH 8.1
CVE-2026-44565

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.10, when uploading an audio file, the…

Fix: 0.6.10+
Fix from $1,950 2026-05-15
Open Webui HIGH 8.8
CVE-2026-45672

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.12, the /api/v1/utils/code/execute en…

Fix: 0.8.12+
Fix from $1,950 2026-05-15
Open Webui HIGH 8.5
CVE-2026-45400

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, a parsing difference between the u…

Fix: 0.9.5+
Fix from $1,950 2026-05-15
Open Webui HIGH 8.5
CVE-2026-45401

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the validate_url() function in bac…

Fix: 0.9.5+
Fix from $1,950 2026-05-15
Open Webui HIGH 8.1
CVE-2026-45402

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, multiple endpoints accept a user-s…

Fix: 0.9.5+
Fix from $1,950 2026-05-15
Open Webui HIGH 7.5
CVE-2026-45398

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, _validate_collection_access() chec…

Fix: 0.9.5+
Fix from $1,950 2026-05-15
Open Webui HIGH 7.2
CVE-2026-45395

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the tool update endpoint (POST /ap…

Fix: 0.9.5+
Fix from $1,950 2026-05-15
Open Webui MEDIUM 5.4
CVE-2026-45396

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the POST /api/v1/evaluations/feedb…

Fix: 0.9.5+
Fix from $1,600 2026-05-15
Open Webui MEDIUM 5.3
CVE-2026-45397

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, GET /api/v1/retrieval/ returns liv…

Fix: 0.9.5+
Fix from $1,600 2026-05-15
Open Webui HIGH 7.3
CVE-2026-44721

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a stored cross-site scripting (XSS…

Fix: 0.9.0+
Fix from $1,950 2026-05-15