Is CVE-2026-70493 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-70493 being exploited in the wild.

How severe is CVE-2026-70493?

Medium severity, with a CVSS score of 6.5, published 4 August 2026.

Which products and versions are affected?

open-webui (PyPI) >= 0.9.6, < 0.11.0, ECOSYSTEM:introduced=0.9.6,fixed=0.11.0.

Is there a fix for CVE-2026-70493?

Yes. open-webui (PyPI): upgrade to 0.11.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-70493 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-70493?

Check whether you run open-webui (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-70493: Open WebUI ReDoS in knowledge search tools

Q: Is there a fix for CVE-2026-70493?

Yes. open-webui (PyPI): upgrade to 0.11.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-70493 attacked?

It is attacked over the network, in a network appliance.

Q: Am I affected by CVE-2026-70493?

Check whether you run open-webui (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-70493 · Severity: medium · CVSS 6.5 · Published 2026-08-04

Open WebUI, a user interface for AI models, is vulnerable to a denial-of-service attack. An authenticated user can provide a specially crafted search pattern that causes the system's processor to become stuck in an infinite loop. This can result in the entire application becoming unresponsive for all users, effectively shutting down the service.

Technologies: open-webui (PyPI). Vendors: PyPI.

Quick answers

Is CVE-2026-70493 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-70493 being exploited in the wild.
How severe is CVE-2026-70493?: Medium severity, with a CVSS score of 6.5, published 4 August 2026.
Which products and versions are affected?: open-webui (PyPI) >= 0.9.6, < 0.11.0, ECOSYSTEM:introduced=0.9.6,fixed=0.11.0.
Is there a fix for CVE-2026-70493?: Yes. open-webui (PyPI): upgrade to 0.11.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-70493 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-70493?: Check whether you run open-webui (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

open-webui (PyPI): upgrade to 0.11.0 or later
```
pip install "open-webui>=0.11.0"
```

Technical details

A Regular Expression Denial of Service (ReDoS) vulnerability exists in Open WebUI's knowledge search functionality. The `grep_knowledge_files` tool in `backend/open_webui/tools/builtin.py` uses Python's `re` engine to compile and execute user-provided patterns against files without a timeout. Because the search runs synchronously within the event loop, a pattern designed to trigger catastrophic backtracking (e.g., `(x|x)*y`) can exhaust CPU resources and block the worker process from handling other requests. The vulnerability is present in the default configuration where knowledge tools are enabled. It was fixed in version 0.11.0 by migrating to the `regex` engine and implementing a global 2-second matching budget per tool call.

Affected products

Open WebUI open-webui >= 0.9.6, < 0.11.0

Identifiers

CVE-2026-70493
GHSA-2f54-p244-32q6
PYSEC-2026-3637

Timeline

2026-08-02: patched: Fix merged in PR 27471
2026-08-04: advisory: GitHub Advisory GHSA-2f54-p244-32q6 published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.