Browse CVEs

HIGH 8.1 CVE-2026-45665 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, a Stored Cross-Site Scripting (XSS… Open Webui 0.8.0+ Fix from $1,9502026-05-15 HIGH 7.1 CVE-2026-45350 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, there is a vulnerability in chat c… Open Webui 0.8.6+ Fix from $1,9502026-05-15 MEDIUM 6.5 CVE-2026-45351 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.9, when a regular user [non-admin] lo… Open Webui 0.8.9+ Fix from $1,6002026-05-15 MEDIUM 5.4 CVE-2026-45346 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.31, there is a Cross-Site Scripting v… Open Webui 0.6.31+ Fix from $1,6002026-05-15 MEDIUM 5.4 CVE-2026-45347 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.5.11, there is a blind server side requ… Open Webui 0.5.11+ Fix from $1,6002026-05-15 MEDIUM 5.4 CVE-2026-45365 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, an internal-only bypass_filter pa… Open Webui 0.8.11+ Fix from $1,6002026-05-15 HIGH 8.7 CVE-2026-45315 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the audio transcription upload end… Open Webui 0.9.3+ Fix from $1,9502026-05-15 HIGH 7.7 CVE-2026-45338 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a Server-Side Request Forgery (SSR… Open Webui 0.9.0+ Fix from $1,9502026-05-15 MEDIUM 6.5 CVE-2026-45345 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.5.7, a user can modify another user's m… Open Webui 0.5.7+ Fix from $1,6002026-05-15 MEDIUM 6.1 CVE-2026-45314 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the channel webhook create/update … Open Webui 0.9.3+ Fix from $1,6002026-05-15 MEDIUM 5.4 CVE-2026-45318 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, his advisory tracks a regression o… Open Webui 0.9.3+ Fix from $1,6002026-05-15 HIGH 8.3 CVE-2026-44570 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.19, authorization controls surroundin… Open Webui 0.6.19+ Fix from $1,9502026-05-15 HIGH 8.1 CVE-2026-45301 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.3.16, a missing permission check in all… Open Webui 0.3.16+ Fix from $1,9502026-05-15 HIGH 7.7 CVE-2026-45303 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.5, through the HTML rendering view, s… Open Webui 0.6.5+ Fix from $1,9502026-05-15 HIGH 7.3 CVE-2026-44567 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.1.124, the API does not properly valida… Open Webui 0.1.124+ Fix from $1,9502026-05-15 HIGH 7.1 CVE-2026-44569 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.19, there's an IDOR in the channels m… Open Webui 0.6.19+ Fix from $1,9502026-05-15 MEDIUM 6.5 CVE-2026-44571 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, in standard channels (i.e., channe… Open Webui 0.8.6+ Fix from $1,6002026-05-15 MEDIUM 5.4 CVE-2026-45299 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, the profile_image_url field on the… Open Webui 0.8.0+ Fix from $1,6002026-05-15 CRITICAL 9.8 CVE-2026-44566 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.1.124, when attaching files to a promp,… Open Webui 0.1.124+ Fix from $2,3002026-05-15 HIGH 8.7 CVE-2026-44549 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.0, Excel file attachments are preview… Open Webui 0.8.0+ Fix from $1,9502026-05-15 HIGH 8.1 CVE-2026-44565 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.10, when uploading an audio file, the… Open Webui 0.6.10+ Fix from $1,9502026-05-15 HIGH 8.8 CVE-2026-45672 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.12, the /api/v1/utils/code/execute en… Open Webui 0.8.12+ Fix from $1,9502026-05-15 HIGH 8.5 CVE-2026-45400 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, a parsing difference between the u… Open Webui 0.9.5+ Fix from $1,9502026-05-15 HIGH 8.5 CVE-2026-45401 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the validate_url() function in bac… Open Webui 0.9.5+ Fix from $1,9502026-05-15 HIGH 8.1 CVE-2026-45402 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, multiple endpoints accept a user-s… Open Webui 0.9.5+ Fix from $1,9502026-05-15 HIGH 7.5 CVE-2026-45398 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, _validate_collection_access() chec… Open Webui 0.9.5+ Fix from $1,9502026-05-15 HIGH 7.2 CVE-2026-45395 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the tool update endpoint (POST /ap… Open Webui 0.9.5+ Fix from $1,9502026-05-15 MEDIUM 5.4 CVE-2026-45396 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the POST /api/v1/evaluations/feedb… Open Webui 0.9.5+ Fix from $1,6002026-05-15 MEDIUM 5.3 CVE-2026-45397 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, GET /api/v1/retrieval/ returns liv… Open Webui 0.9.5+ Fix from $1,6002026-05-15 HIGH 7.3 CVE-2026-44721 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a stored cross-site scripting (XSS… Open Webui 0.9.0+ Fix from $1,9502026-05-15