Is CVE-2024-12537 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2024-12537 being exploited in the wild.

How severe is CVE-2024-12537?

Low severity, with a CVSS score of 3, published 7 July 2026.

Which products and versions are affected?

open-webui (npm) SEMVER:introduced=0,last_affected=0.3.32; open-webui (PyPI) ECOSYSTEM:introduced=0,last_affected=0.3.32.

Is there a fix for CVE-2024-12537?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2024-12537 attacked?

It is attacked over the network.

Am I affected by CVE-2024-12537?

Check whether you run open-webui (npm) or open-webui (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2024-12537: PYSEC-2026-1728 - Open WebUI Uncontrolled Resource Consumption vulnerability

CVE-2024-12537 · Severity: low · CVSS 3 · Published 2026-07-07

Open WebUI is a user-friendly interface for interacting with AI models. An unauthenticated attacker can send excessive requests to a publicly accessible API endpoint, causing the server to consume all available resources and become unresponsive, resulting in service outages for legitimate users.

Technologies: open-webui (npm), open-webui (PyPI). Vendors: npm, PyPI.

Quick answers

Is CVE-2024-12537 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2024-12537 being exploited in the wild.
How severe is CVE-2024-12537?: Low severity, with a CVSS score of 3, published 7 July 2026.
Which products and versions are affected?: open-webui (npm) SEMVER:introduced=0,last_affected=0.3.32; open-webui (PyPI) ECOSYSTEM:introduced=0,last_affected=0.3.32.
Is there a fix for CVE-2024-12537?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2024-12537 attacked?: It is attacked over the network.
Am I affected by CVE-2024-12537?: Check whether you run open-webui (npm) or open-webui (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is an uncontrolled resource consumption flaw (CWE-400/CWE-770) in the /api/v1/utils/code/format endpoint of Open WebUI version 0.3.32 and earlier. The endpoint lacks authentication checks, allowing any network-based attacker to access it without credentials. By sending a POST request with an excessively large payload, an attacker can exhaust server resources (CPU, memory, or disk), causing denial of service. The vulnerable code path is located in src/lib/apis/utils/index.ts (lines 25-56). No patch availability is mentioned in the advisory, though the affected versions range from 0.1.124 through 0.3.32.

Affected products

Open WebUI Open WebUI 0.1.124 through 0.3.32

Identifiers

CVE-2024-12537
GHSA-chf7-q7m5-fq92
PYSEC-2026-1728

Timeline

2025-03-20: disclosed: Vulnerability published in GitHub Advisory Database and NVD

References

https://github.com/open-webui/open-webui

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.