Product by Open WebUI
Open WebUI
167 known vulnerabilities in Open WebUI (Open WebUI), 0 of them actively exploited (CISA KEV).
Key figures
167
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-7959 | SSRF in open-webui/open-webui | 7.7 | |
| High | CVE-2026-34222 | Open WebUI has Broken Access Control in Tool Valves | 7.7 | |
| High | CVE-2025-65958 | Open-webui: Server-Side Request Forgery (SSRF) | 8.5 | |
| High | CVE-2025-64496 | Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events | 7.3 | |
| Medium | CVE-2024-7035 | Cross-Site Request Forgery (CSRF) in open-webui/open-webui | 6.9 | |
| High | CVE-2026-28788 | Open-webui: Authorization Bypass Through User-Controlled Key | 7.1 | |
| Critical | CVE-2026-44551 | Open WebUI: LDAP Empty Password Authentication Bypass | 9.1 | |
| Medium | CVE-2024-7034 | Remote Code Execution due to Arbitrary File Write in open-webui/open-webui | 6.5 | |
| High | CVE-2026-87016 | Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite | 8.1 | |
| High | CVE-2026-87011 | Open-webui: Allocation of Resources Without Limits or Throttling | 7.5 | |
| Critical | CVE-2026-56398 | Open WebUI - Stored Cross-Site Scripting via OAuth Picture Claim SVG Data URI | 7.3 | |
| High | CVE-2024-6707 | Open WebUI Arbitrary File Upload + Path Traversal | 8.8 | |
| Critical | CVE-2026-56400 | open-webui - Remote Code Execution via CORS Misconfiguration and Session Validation | 8.3 | |
| High | CVE-2024-12534 | Open WebUI: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2026-70482 | Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client | 8.1 | |
| High | CVE-2026-87995 | Open-webui: Cross-site Scripting | 8.7 | |
| High | CVE-2026-70494 | Open-webui: Missing Authorization | 8.1 | |
| Medium | CVE-2026-88000 | Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree | 6.5 | |
| Medium | CVE-2026-88002 | Open WebUI: Any authenticated user can hang the server via a cyclic chat message history | 6.5 | |
| High | CVE-2026-87998 | Open-webui: Improper Privilege Management | 7.1 | |
| High | CVE-2024-7990 | Stored Cross-Site Scripting in open-webui/open-webui | 8.4 | |
| High | CVE-2026-70492 | Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages | 8.7 | |
| Medium | CVE-2026-87014 | Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes | 6.5 | |
| High | CVE-2026-70479 | Open-webui: Server-Side Request Forgery (SSRF) | 7.7 | |
| Medium | CVE-2026-87015 | Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication | 6.8 |