{"schema_version":1,"title":"Open WebUI vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 18 vulnerabilities in Open WebUI: 0 in the last 7 days and 17 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-109300, was published on 12 October 2026. 17 vulnerabilities in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/open-webui-open-webui","json_url":"https://junglewise.ai/threats/technologies/open-webui-open-webui.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/open-webui-open-webui","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":3,"all_time":18,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":17,"last_365_days":18},"latest":[{"cve":"CVE-2026-109300","cvss":4.6,"epss":0.0018,"slug":"cve-2026-109300-open-webui-from-0-6-31-before-0-11-4-contains-a-stored-cross","title":"Open WebUI stored cross-site scripting in Markdown renderer","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:23.7+00:00","url":"https://junglewise.ai/threats/cve-2026-109300-open-webui-from-0-6-31-before-0-11-4-contains-a-stored-cross"},{"cve":"CVE-2026-109299","cvss":6.5,"epss":0.0038,"slug":"cve-2026-109299-open-webui-from-0-9-0-before-0-11-4-contains-a-denial-of-service","title":"Open WebUI denial of service in recurrence rule validation","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:23.54+00:00","url":"https://junglewise.ai/threats/cve-2026-109299-open-webui-from-0-9-0-before-0-11-4-contains-a-denial-of-service"},{"cve":"CVE-2026-109298","cvss":6.5,"epss":0.0039,"slug":"cve-2026-109298-open-webui-0-11-0-before-0-11-4-compiles-user-chosen-grep","title":"Open WebUI regex denial of service in file search tools","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:23.39+00:00","url":"https://junglewise.ai/threats/cve-2026-109298-open-webui-0-11-0-before-0-11-4-compiles-user-chosen-grep"},{"cve":"CVE-2026-109297","cvss":6.5,"epss":0.0031,"slug":"cve-2026-109297-open-webui-0-11-0-before-0-11-4-contains-a-denial-of-service","title":"Open WebUI automation recurrence-rule denial of service","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:23.24+00:00","url":"https://junglewise.ai/threats/cve-2026-109297-open-webui-0-11-0-before-0-11-4-contains-a-denial-of-service"},{"cve":"CVE-2026-109296","cvss":4.3,"epss":0.0028,"slug":"cve-2026-109296-open-webui-before-0-11-4-contains-a-missing-authorization","title":"Open WebUI missing authorization in model provider routes","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:23.097+00:00","url":"https://junglewise.ai/threats/cve-2026-109296-open-webui-before-0-11-4-contains-a-missing-authorization"},{"cve":"CVE-2026-109295","cvss":6.5,"epss":0.0031,"slug":"cve-2026-109295-open-webui-from-0-11-0-before-0-11-4-contains-a-regular","title":"Open WebUI regular expression denial of service in file search","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:22.95+00:00","url":"https://junglewise.ai/threats/cve-2026-109295-open-webui-from-0-11-0-before-0-11-4-contains-a-regular"},{"cve":"CVE-2026-109294","cvss":6.5,"epss":0.0031,"slug":"cve-2026-109294-open-webui-from-0-6-42-before-0-11-4-contains-an-uncontrolled","title":"Open WebUI memory exhaustion via compressed remote image","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:22.8+00:00","url":"https://junglewise.ai/threats/cve-2026-109294-open-webui-from-0-6-42-before-0-11-4-contains-an-uncontrolled"},{"cve":"CVE-2026-109293","cvss":6.5,"epss":0.0029,"slug":"cve-2026-109293-open-webui-from-0-11-0-before-0-11-4-contains-an-information","title":"Open WebUI tool source code disclosure via export endpoint","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:22.65+00:00","url":"https://junglewise.ai/threats/cve-2026-109293-open-webui-from-0-11-0-before-0-11-4-contains-an-information"},{"cve":"CVE-2026-109292","cvss":6.8,"epss":0.0032,"slug":"cve-2026-109292-open-webui-from-0-6-27-before-0-11-4-contains-an-information","title":"Open WebUI session cookie leakage in OAuth mode","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:22.5+00:00","url":"https://junglewise.ai/threats/cve-2026-109292-open-webui-from-0-6-27-before-0-11-4-contains-an-information"},{"cve":"CVE-2026-109291","cvss":7.3,"epss":0.0028,"slug":"cve-2026-109291-open-webui-from-0-6-33-before-0-11-4-contains-a-cross-site","title":"Open WebUI stored cross-site scripting in citation embed_url","severity":"high","exploited":false,"published_at":"2026-10-12T17:17:22.353+00:00","url":"https://junglewise.ai/threats/cve-2026-109291-open-webui-from-0-6-33-before-0-11-4-contains-a-cross-site"},{"cve":"CVE-2026-109290","cvss":7.3,"epss":0.0026,"slug":"cve-2026-109290-open-webui-from-0-11-1-before-0-11-4-contains-a-stored-cross","title":"Open WebUI stored cross-site scripting in DOCX preview","severity":"high","exploited":false,"published_at":"2026-10-12T17:17:22.21+00:00","url":"https://junglewise.ai/threats/cve-2026-109290-open-webui-from-0-11-1-before-0-11-4-contains-a-stored-cross"},{"cve":"CVE-2026-109289","cvss":6.3,"epss":0.0021,"slug":"cve-2026-109289-open-webui-from-0-8-8-before-0-11-4-contains-an-improper","title":"Open WebUI improper session revocation in terminal WebSocket","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:22.06+00:00","url":"https://junglewise.ai/threats/cve-2026-109289-open-webui-from-0-8-8-before-0-11-4-contains-an-improper"},{"cve":"CVE-2026-109288","cvss":6.4,"epss":0.0023,"slug":"cve-2026-109288-open-webui-before-0-11-4-contains-a-stored-cross-site-scripting","title":"Open WebUI stored cross-site scripting in markdown link rendering","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:21.913+00:00","url":"https://junglewise.ai/threats/cve-2026-109288-open-webui-before-0-11-4-contains-a-stored-cross-site-scripting"},{"cve":"CVE-2026-109287","cvss":4.3,"epss":0.0022,"slug":"cve-2026-109287-open-webui-from-0-9-6-before-0-11-4-contains-an-authorization","title":"Open WebUI authorization flaw in knowledge base file listing","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:21.763+00:00","url":"https://junglewise.ai/threats/cve-2026-109287-open-webui-from-0-9-6-before-0-11-4-contains-an-authorization"},{"cve":"CVE-2026-109285","cvss":5,"epss":0.002,"slug":"cve-2026-109285-open-webui-from-0-6-0-before-0-11-4-contains-an-improper-access","title":"Open WebUI improper access control in knowledge base file handling","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:21.463+00:00","url":"https://junglewise.ai/threats/cve-2026-109285-open-webui-from-0-6-0-before-0-11-4-contains-an-improper-access"},{"cve":"CVE-2026-109284","cvss":4.3,"epss":0.0021,"slug":"cve-2026-109284-open-webui-from-0-11-0-before-0-11-4-contains-an-improper","title":"Open WebUI improper authorization in chat fork handler","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:21.317+00:00","url":"https://junglewise.ai/threats/cve-2026-109284-open-webui-from-0-11-0-before-0-11-4-contains-an-improper"},{"cve":"CVE-2026-109283","cvss":5.4,"epss":0.0021,"slug":"cve-2026-109283-open-webui-from-0-11-1-before-0-11-4-contains-an-authorization","title":"Open WebUI authorization bypass in OAuth token exchange","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:21.167+00:00","url":"https://junglewise.ai/threats/cve-2026-109283-open-webui-from-0-11-1-before-0-11-4-contains-an-authorization"},{"cve":"CVE-2025-65959","cvss":8.7,"epss":0.0024,"slug":"cve-2025-65959-open-webui-stored-dom-xss-in-note-pdf-download","title":"Open WebUI stored DOM XSS in Note PDF download","severity":"high","exploited":false,"published_at":"2025-12-04T21:16:08.97+00:00","url":"https://junglewise.ai/threats/cve-2025-65959-open-webui-stored-dom-xss-in-note-pdf-download"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":17},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Open WebUI","slug":"open-webui-open-webui","vendor":{"hub":true,"name":"Open WebUI","slug":"open-webui","url":"https://junglewise.ai/threats/vendors/open-webui"},"aliases":[],"category":"web","homepage":"https://openwebui.com","description":"Web interface for interacting with large language models and AI assistants.","url":"https://junglewise.ai/threats/technologies/open-webui-open-webui"},"most_severe":[{"cve":"CVE-2025-65959","cvss":8.7,"epss":0.0024,"slug":"cve-2025-65959-open-webui-stored-dom-xss-in-note-pdf-download","title":"Open WebUI stored DOM XSS in Note PDF download","severity":"high","exploited":false,"published_at":"2025-12-04T21:16:08.97+00:00","url":"https://junglewise.ai/threats/cve-2025-65959-open-webui-stored-dom-xss-in-note-pdf-download"},{"cve":"CVE-2026-109291","cvss":7.3,"epss":0.0028,"slug":"cve-2026-109291-open-webui-from-0-6-33-before-0-11-4-contains-a-cross-site","title":"Open WebUI stored cross-site scripting in citation embed_url","severity":"high","exploited":false,"published_at":"2026-10-12T17:17:22.353+00:00","url":"https://junglewise.ai/threats/cve-2026-109291-open-webui-from-0-6-33-before-0-11-4-contains-a-cross-site"},{"cve":"CVE-2026-109290","cvss":7.3,"epss":0.0026,"slug":"cve-2026-109290-open-webui-from-0-11-1-before-0-11-4-contains-a-stored-cross","title":"Open WebUI stored cross-site scripting in DOCX preview","severity":"high","exploited":false,"published_at":"2026-10-12T17:17:22.21+00:00","url":"https://junglewise.ai/threats/cve-2026-109290-open-webui-from-0-11-1-before-0-11-4-contains-a-stored-cross"},{"cve":"CVE-2026-109292","cvss":6.8,"epss":0.0032,"slug":"cve-2026-109292-open-webui-from-0-6-27-before-0-11-4-contains-an-information","title":"Open WebUI session cookie leakage in OAuth mode","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:22.5+00:00","url":"https://junglewise.ai/threats/cve-2026-109292-open-webui-from-0-6-27-before-0-11-4-contains-an-information"},{"cve":"CVE-2026-109298","cvss":6.5,"epss":0.0039,"slug":"cve-2026-109298-open-webui-0-11-0-before-0-11-4-compiles-user-chosen-grep","title":"Open WebUI regex denial of service in file search tools","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:23.39+00:00","url":"https://junglewise.ai/threats/cve-2026-109298-open-webui-0-11-0-before-0-11-4-compiles-user-chosen-grep"},{"cve":"CVE-2026-109299","cvss":6.5,"epss":0.0038,"slug":"cve-2026-109299-open-webui-from-0-9-0-before-0-11-4-contains-a-denial-of-service","title":"Open WebUI denial of service in recurrence rule validation","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:23.54+00:00","url":"https://junglewise.ai/threats/cve-2026-109299-open-webui-from-0-9-0-before-0-11-4-contains-a-denial-of-service"},{"cve":"CVE-2026-109297","cvss":6.5,"epss":0.0031,"slug":"cve-2026-109297-open-webui-0-11-0-before-0-11-4-contains-a-denial-of-service","title":"Open WebUI automation recurrence-rule denial of service","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:23.24+00:00","url":"https://junglewise.ai/threats/cve-2026-109297-open-webui-0-11-0-before-0-11-4-contains-a-denial-of-service"},{"cve":"CVE-2026-109295","cvss":6.5,"epss":0.0031,"slug":"cve-2026-109295-open-webui-from-0-11-0-before-0-11-4-contains-a-regular","title":"Open WebUI regular expression denial of service in file search","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:22.95+00:00","url":"https://junglewise.ai/threats/cve-2026-109295-open-webui-from-0-11-0-before-0-11-4-contains-a-regular"},{"cve":"CVE-2026-109294","cvss":6.5,"epss":0.0031,"slug":"cve-2026-109294-open-webui-from-0-6-42-before-0-11-4-contains-an-uncontrolled","title":"Open WebUI memory exhaustion via compressed remote image","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:22.8+00:00","url":"https://junglewise.ai/threats/cve-2026-109294-open-webui-from-0-6-42-before-0-11-4-contains-an-uncontrolled"},{"cve":"CVE-2026-109293","cvss":6.5,"epss":0.0029,"slug":"cve-2026-109293-open-webui-from-0-11-0-before-0-11-4-contains-an-information","title":"Open WebUI tool source code disclosure via export endpoint","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:22.65+00:00","url":"https://junglewise.ai/threats/cve-2026-109293-open-webui-from-0-11-0-before-0-11-4-contains-an-information"}],"generated_at":"2026-11-12T03:07:00.164048+00:00"}