Executive brief
Open WebUI is a user-friendly interface for interacting with AI models. An unauthenticated attacker can send excessive requests to a publicly accessible API endpoint, causing the server to consume all available resources and become unresponsive, resulting in service outages for legitimate users.
Technical details
The vulnerability is an uncontrolled resource consumption flaw (CWE-400/CWE-770) in the /api/v1/utils/code/format endpoint of Open WebUI version 0.3.32 and earlier. The endpoint lacks authentication checks, allowing any network-based attacker to access it without credentials. By sending a POST request with an excessively large payload, an attacker can exhaust server resources (CPU, memory, or disk), causing denial of service. The vulnerable code path is located in src/lib/apis/utils/index.ts (lines 25-56). No patch availability is mentioned in the advisory, though the affected versions range from 0.1.124 through 0.3.32.
Affected products
- Open WebUI Open WebUI 0.1.124 through 0.3.32
Timeline
- 2025-03-20: disclosed: Vulnerability published in GitHub Advisory Database and NVD