# CVE-2024-12537: PYSEC-2026-1728 - Open WebUI Uncontrolled Resource Consumption vulnerability

Source: https://junglewise.ai/threats/cve-2024-12537-open-webui-uncontrolled-resource-consumption-in-code-format  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-07. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2024-12537 · Severity: low · CVSS 3 · Published 2026-07-07

Open WebUI is a user-friendly interface for interacting with AI models. An unauthenticated attacker can send excessive requests to a publicly accessible API endpoint, causing the server to consume all available resources and become unresponsive, resulting in service outages for legitimate users.

Technologies: [open-webui (npm)](https://junglewise.ai/threats/technologies/npm-open-webui), [open-webui (PyPI)](https://junglewise.ai/threats/technologies/open-webui). Vendors: [npm](https://junglewise.ai/threats/vendors/npm), [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2024-12537 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2024-12537 being exploited in the wild.

**How severe is CVE-2024-12537?** Low severity, with a CVSS score of 3, published 7 July 2026.

**Which products and versions are affected?** open-webui (npm) SEMVER:introduced=0,last_affected=0.3.32; open-webui (PyPI) ECOSYSTEM:introduced=0,last_affected=0.3.32.

**Is there a fix for CVE-2024-12537?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2024-12537 attacked?** It is attacked over the network.

**Am I affected by CVE-2024-12537?** Check whether you run open-webui (npm) or open-webui (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is an uncontrolled resource consumption flaw (CWE-400/CWE-770) in the /api/v1/utils/code/format endpoint of Open WebUI version 0.3.32 and earlier. The endpoint lacks authentication checks, allowing any network-based attacker to access it without credentials. By sending a POST request with an excessively large payload, an attacker can exhaust server resources (CPU, memory, or disk), causing denial of service. The vulnerable code path is located in src/lib/apis/utils/index.ts (lines 25-56). No patch availability is mentioned in the advisory, though the affected versions range from 0.1.124 through 0.3.32.

## Affected products

- Open WebUI Open WebUI 0.1.124 through 0.3.32

## Identifiers

- CVE-2024-12537
- GHSA-chf7-q7m5-fq92
- PYSEC-2026-1728

## Timeline

- 2025-03-20: disclosed: Vulnerability published in GitHub Advisory Database and NVD

## References

- [https://github.com/open-webui/open-webui](https://github.com/open-webui/open-webui)

## Related threats

- [Open WebUI OAuth token exchange authorization bypass](https://junglewise.ai/threats/cve-2026-88006-open-webui-oauth-token-exchange-authorization-bypass)
- [Open WebUI OAuth token exchange authorization bypass](https://junglewise.ai/threats/cve-2026-88005-open-webui-oauth-token-exchange-authorization-bypass)
- [Open WebUI infinite loop denial of service in chat history reconstruction](https://junglewise.ai/threats/cve-2026-88002-open-webui-infinite-loop-denial-of-service-in-chat-history)
- [Open WebUI server-side request forgery via unvalidated HTTP redirects](https://junglewise.ai/threats/cve-2026-88001-open-webui-server-side-request-forgery-via-unvalidated-http)
- [Open WebUI denial of service via cyclic chat tree message deletion](https://junglewise.ai/threats/cve-2026-88000-open-webui-denial-of-service-via-cyclic-chat-tree-message)