OOpen WebUI

Products

Exploited and recent CVEs

• CVE-2026-109572 High 7.6 Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy 0.3%
• CVE-2026-109300 Medium 4.6 Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call Embeds 0.2%
• CVE-2026-109299 Medium 6.5 Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validation 0.4%
• CVE-2026-109298 Medium 6.5 Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regex 0.5%
• CVE-2026-109297 Medium 6.5 Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence Rules 0.4%
• CVE-2026-109296 Medium 4.3 Open WebUI before 0.11.4 Missing Authorization via Backend Index on Model Routes 0.3%
• CVE-2026-109295 Medium 4.3 Open WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowledge_files Event Loop 0.3%
• CVE-2026-109294 Medium 6.5 Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Image 0.3%
• CVE-2026-109293 Medium 6.5 Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint 0.4%
• CVE-2026-109292 Medium 6.8 Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections 0.4%
• CVE-2026-109291 High 7.3 Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citation embed_url 0.3%
• CVE-2026-109290 High 8.7 Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview 0.3%
• CVE-2026-109289 Medium 6.3 Open WebUI 0.8.8 before 0.11.4 Improper Session Revocation via Terminal WebSocket 0.2%
• CVE-2026-109288 Medium 6.4 Open WebUI before 0.11.4 Stored XSS via javascript: URLs in Markdown Links 0.3%
• CVE-2026-109287 Medium 4.3 Open WebUI 0.9.6 before 0.11.4 Information Disclosure via Unscoped Directory ID 0.3%
• CVE-2026-109286 High 8.1 Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModal 0.1%
• CVE-2026-109285 Medium 5.0 Open WebUI 0.6.0 before 0.11.4 Improper Access Control via Stale File Metadata 0.2%
• CVE-2026-109284 Medium 4.3 Open WebUI 0.11.0 before 0.11.4 Improper Authorization via Chat Fork Endpoint 0.2%
• CVE-2026-109283 Medium 5.4 Open WebUI 0.11.1 before 0.11.4 Authorization Bypass via OAuth Token Exchange 0.3%
• CVE-2026-88006 Medium 6.5 Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange 0.4%
• CVE-2026-88005 Medium 6.5 Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange 0.4%
• CVE-2026-88002 Medium 6.5 Open WebUI: Any authenticated user can hang the server via a cyclic chat message history 0.6%
• CVE-2026-88001 Medium 5.0 Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets 0.4%
• CVE-2026-88000 Medium 6.5 Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree 0.6%
• CVE-2026-87999 High 7.1 Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch 0.4%
• CVE-2026-87998 High 7.1 Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion 0.5%
• CVE-2026-87997 Medium 4.3 Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions 0.4%
• CVE-2026-87996 High 7.7 Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader 0.4%
• CVE-2026-87995 High 8.7 Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin 0.4%
• CVE-2026-87994 Medium 4.3 Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint 0.4%