{"schema_version":1,"title":"Open WebUI vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 170 vulnerabilities in Open WebUI: 0 in the last 7 days and 34 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-109300, was published on 12 October 2026. 17 vulnerabilities in the last four weeks, up from none in the four before. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/open-webui","json_url":"https://junglewise.ai/threats/vendors/open-webui.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/open-webui","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":65,"all_time":170,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":34,"last_365_days":163},"latest":[{"cve":"CVE-2026-109300","cvss":4.6,"epss":0.0018,"slug":"cve-2026-109300-open-webui-from-0-6-31-before-0-11-4-contains-a-stored-cross","title":"Open WebUI stored cross-site scripting in Markdown renderer","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:23.7+00:00","url":"https://junglewise.ai/threats/cve-2026-109300-open-webui-from-0-6-31-before-0-11-4-contains-a-stored-cross"},{"cve":"CVE-2026-109299","cvss":6.5,"epss":0.0038,"slug":"cve-2026-109299-open-webui-from-0-9-0-before-0-11-4-contains-a-denial-of-service","title":"Open WebUI denial of service in recurrence rule validation","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:23.54+00:00","url":"https://junglewise.ai/threats/cve-2026-109299-open-webui-from-0-9-0-before-0-11-4-contains-a-denial-of-service"},{"cve":"CVE-2026-109298","cvss":6.5,"epss":0.0039,"slug":"cve-2026-109298-open-webui-0-11-0-before-0-11-4-compiles-user-chosen-grep","title":"Open WebUI regex denial of service in file search tools","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:23.39+00:00","url":"https://junglewise.ai/threats/cve-2026-109298-open-webui-0-11-0-before-0-11-4-compiles-user-chosen-grep"},{"cve":"CVE-2026-109297","cvss":6.5,"epss":0.0031,"slug":"cve-2026-109297-open-webui-0-11-0-before-0-11-4-contains-a-denial-of-service","title":"Open WebUI automation recurrence-rule denial of service","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:23.24+00:00","url":"https://junglewise.ai/threats/cve-2026-109297-open-webui-0-11-0-before-0-11-4-contains-a-denial-of-service"},{"cve":"CVE-2026-109296","cvss":4.3,"epss":0.0028,"slug":"cve-2026-109296-open-webui-before-0-11-4-contains-a-missing-authorization","title":"Open WebUI missing authorization in model provider routes","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:23.097+00:00","url":"https://junglewise.ai/threats/cve-2026-109296-open-webui-before-0-11-4-contains-a-missing-authorization"},{"cve":"CVE-2026-109295","cvss":6.5,"epss":0.0031,"slug":"cve-2026-109295-open-webui-from-0-11-0-before-0-11-4-contains-a-regular","title":"Open WebUI regular expression denial of service in file search","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:22.95+00:00","url":"https://junglewise.ai/threats/cve-2026-109295-open-webui-from-0-11-0-before-0-11-4-contains-a-regular"},{"cve":"CVE-2026-109294","cvss":6.5,"epss":0.0031,"slug":"cve-2026-109294-open-webui-from-0-6-42-before-0-11-4-contains-an-uncontrolled","title":"Open WebUI memory exhaustion via compressed remote image","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:22.8+00:00","url":"https://junglewise.ai/threats/cve-2026-109294-open-webui-from-0-6-42-before-0-11-4-contains-an-uncontrolled"},{"cve":"CVE-2026-109293","cvss":6.5,"epss":0.0029,"slug":"cve-2026-109293-open-webui-from-0-11-0-before-0-11-4-contains-an-information","title":"Open WebUI tool source code disclosure via export endpoint","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:22.65+00:00","url":"https://junglewise.ai/threats/cve-2026-109293-open-webui-from-0-11-0-before-0-11-4-contains-an-information"},{"cve":"CVE-2026-109292","cvss":6.8,"epss":0.0032,"slug":"cve-2026-109292-open-webui-from-0-6-27-before-0-11-4-contains-an-information","title":"Open WebUI session cookie leakage in OAuth mode","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:22.5+00:00","url":"https://junglewise.ai/threats/cve-2026-109292-open-webui-from-0-6-27-before-0-11-4-contains-an-information"},{"cve":"CVE-2026-109291","cvss":7.3,"epss":0.0028,"slug":"cve-2026-109291-open-webui-from-0-6-33-before-0-11-4-contains-a-cross-site","title":"Open WebUI stored cross-site scripting in citation embed_url","severity":"high","exploited":false,"published_at":"2026-10-12T17:17:22.353+00:00","url":"https://junglewise.ai/threats/cve-2026-109291-open-webui-from-0-6-33-before-0-11-4-contains-a-cross-site"},{"cve":"CVE-2026-109290","cvss":7.3,"epss":0.0026,"slug":"cve-2026-109290-open-webui-from-0-11-1-before-0-11-4-contains-a-stored-cross","title":"Open WebUI stored cross-site scripting in DOCX preview","severity":"high","exploited":false,"published_at":"2026-10-12T17:17:22.21+00:00","url":"https://junglewise.ai/threats/cve-2026-109290-open-webui-from-0-11-1-before-0-11-4-contains-a-stored-cross"},{"cve":"CVE-2026-109289","cvss":6.3,"epss":0.0021,"slug":"cve-2026-109289-open-webui-from-0-8-8-before-0-11-4-contains-an-improper","title":"Open WebUI improper session revocation in terminal WebSocket","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:22.06+00:00","url":"https://junglewise.ai/threats/cve-2026-109289-open-webui-from-0-8-8-before-0-11-4-contains-an-improper"},{"cve":"CVE-2026-109288","cvss":6.4,"epss":0.0023,"slug":"cve-2026-109288-open-webui-before-0-11-4-contains-a-stored-cross-site-scripting","title":"Open WebUI stored cross-site scripting in markdown link rendering","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:21.913+00:00","url":"https://junglewise.ai/threats/cve-2026-109288-open-webui-before-0-11-4-contains-a-stored-cross-site-scripting"},{"cve":"CVE-2026-109287","cvss":4.3,"epss":0.0022,"slug":"cve-2026-109287-open-webui-from-0-9-6-before-0-11-4-contains-an-authorization","title":"Open WebUI authorization flaw in knowledge base file listing","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:21.763+00:00","url":"https://junglewise.ai/threats/cve-2026-109287-open-webui-from-0-9-6-before-0-11-4-contains-an-authorization"},{"cve":"CVE-2026-109285","cvss":5,"epss":0.002,"slug":"cve-2026-109285-open-webui-from-0-6-0-before-0-11-4-contains-an-improper-access","title":"Open WebUI improper access control in knowledge base file handling","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:21.463+00:00","url":"https://junglewise.ai/threats/cve-2026-109285-open-webui-from-0-6-0-before-0-11-4-contains-an-improper-access"},{"cve":"CVE-2026-109284","cvss":4.3,"epss":0.0021,"slug":"cve-2026-109284-open-webui-from-0-11-0-before-0-11-4-contains-an-improper","title":"Open WebUI improper authorization in chat fork handler","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:21.317+00:00","url":"https://junglewise.ai/threats/cve-2026-109284-open-webui-from-0-11-0-before-0-11-4-contains-an-improper"},{"cve":"CVE-2026-109283","cvss":5.4,"epss":0.0021,"slug":"cve-2026-109283-open-webui-from-0-11-1-before-0-11-4-contains-an-authorization","title":"Open WebUI authorization bypass in OAuth token exchange","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:21.167+00:00","url":"https://junglewise.ai/threats/cve-2026-109283-open-webui-from-0-11-1-before-0-11-4-contains-an-authorization"},{"cve":"CVE-2026-88006","cvss":6.5,"epss":0.0037,"slug":"cve-2026-88006-open-webui-oauth-token-exchange-authorization-bypass","title":"Open WebUI OAuth token exchange authorization bypass","severity":"medium","exploited":false,"published_at":"2026-09-10T15:17:55.783+00:00","url":"https://junglewise.ai/threats/cve-2026-88006-open-webui-oauth-token-exchange-authorization-bypass"},{"cve":"CVE-2026-88005","cvss":6.5,"epss":0.0037,"slug":"cve-2026-88005-open-webui-oauth-token-exchange-authorization-bypass","title":"Open WebUI OAuth token exchange authorization bypass","severity":"medium","exploited":false,"published_at":"2026-09-10T15:17:55.5+00:00","url":"https://junglewise.ai/threats/cve-2026-88005-open-webui-oauth-token-exchange-authorization-bypass"},{"cve":"CVE-2026-88002","cvss":6.5,"epss":0.0058,"slug":"cve-2026-88002-open-webui-infinite-loop-denial-of-service-in-chat-history","title":"Open WebUI infinite loop denial of service in chat history reconstruction","severity":"medium","exploited":false,"published_at":"2026-09-09T22:18:49.08+00:00","url":"https://junglewise.ai/threats/cve-2026-88002-open-webui-infinite-loop-denial-of-service-in-chat-history"},{"cve":"CVE-2026-88001","cvss":5,"epss":0.0038,"slug":"cve-2026-88001-open-webui-server-side-request-forgery-via-unvalidated-http","title":"Open WebUI server-side request forgery via unvalidated HTTP redirects","severity":"medium","exploited":false,"published_at":"2026-09-09T22:18:48.93+00:00","url":"https://junglewise.ai/threats/cve-2026-88001-open-webui-server-side-request-forgery-via-unvalidated-http"},{"cve":"CVE-2026-88000","cvss":6.5,"epss":0.0059,"slug":"cve-2026-88000-open-webui-denial-of-service-via-cyclic-chat-tree-message","title":"Open WebUI denial of service via cyclic chat tree message deletion","severity":"medium","exploited":false,"published_at":"2026-09-09T22:18:48.777+00:00","url":"https://junglewise.ai/threats/cve-2026-88000-open-webui-denial-of-service-via-cyclic-chat-tree-message"},{"cve":"CVE-2026-87999","cvss":7.1,"epss":0.0036,"slug":"cve-2026-87999-open-webui-server-side-request-forgery-in-url-fetching","title":"Open WebUI server-side request forgery in URL fetching","severity":"high","exploited":false,"published_at":"2026-09-09T22:18:48.617+00:00","url":"https://junglewise.ai/threats/cve-2026-87999-open-webui-server-side-request-forgery-in-url-fetching"},{"cve":"CVE-2026-87998","cvss":7.1,"epss":0.0049,"slug":"cve-2026-87998-open-webui-privilege-escalation-in-external-knowledge-connection","title":"Open WebUI privilege escalation in external knowledge connection deletion","severity":"high","exploited":false,"published_at":"2026-09-09T22:18:48.46+00:00","url":"https://junglewise.ai/threats/cve-2026-87998-open-webui-privilege-escalation-in-external-knowledge-connection"},{"cve":"CVE-2026-87997","cvss":4.3,"epss":0.0037,"slug":"cve-2026-87997-open-webui-missing-folder-write-access-check-in-chat-completions","title":"Open WebUI missing folder write-access check in chat completions","severity":"medium","exploited":false,"published_at":"2026-09-09T22:18:48.267+00:00","url":"https://junglewise.ai/threats/cve-2026-87997-open-webui-missing-folder-write-access-check-in-chat-completions"}],"vendor":{"hub":true,"name":"Open WebUI","slug":"open-webui","description":"Open-source web interface for interacting with large language models.","url":"https://junglewise.ai/threats/vendors/open-webui"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":17},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":17},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-44551","cvss":9.1,"epss":0.0163,"slug":"cve-2026-44551-open-webui-ldap-authentication-bypass-via-empty-password","title":"Open WebUI LDAP authentication bypass via empty password","severity":"critical","exploited":false,"published_at":"2026-05-15T20:16:46.437+00:00","url":"https://junglewise.ai/threats/cve-2026-44551-open-webui-ldap-authentication-bypass-via-empty-password"},{"cve":"CVE-2026-45672","cvss":8.8,"epss":0.0059,"slug":"cve-2026-45672-open-webui-arbitrary-code-execution-via-feature-gate-bypass","title":"Open WebUI arbitrary code execution via feature gate bypass","severity":"high","exploited":false,"published_at":"2026-05-15T21:16:38.51+00:00","url":"https://junglewise.ai/threats/cve-2026-45672-open-webui-arbitrary-code-execution-via-feature-gate-bypass"},{"cve":"CVE-2026-87995","cvss":8.7,"epss":0.0042,"slug":"cve-2026-87995-open-webui-account-takeover-via-port-preview-iframe-sandbox","title":"Open WebUI account takeover via port preview iframe sandbox bypass","severity":"high","exploited":false,"published_at":"2026-09-09T22:18:47.71+00:00","url":"https://junglewise.ai/threats/cve-2026-87995-open-webui-account-takeover-via-port-preview-iframe-sandbox"},{"cve":"CVE-2026-44552","cvss":8.7,"epss":0.0042,"slug":"cve-2026-44552-open-webui-cross-instance-cache-poisoning-in-redis-tool-servers","title":"Open WebUI cross-instance cache poisoning in Redis tool servers","severity":"high","exploited":false,"published_at":"2026-05-15T20:16:46.57+00:00","url":"https://junglewise.ai/threats/cve-2026-44552-open-webui-cross-instance-cache-poisoning-in-redis-tool-servers"},{"cve":"CVE-2026-70492","cvss":8.7,"epss":0.004,"slug":"cve-2026-70492-open-webui-stored-xss-in-katex-render-error-fallback","title":"Open WebUI Stored XSS in KaTeX render-error fallback","severity":"high","exploited":false,"published_at":"2026-08-04T21:16:38.19+00:00","url":"https://junglewise.ai/threats/cve-2026-70492-open-webui-stored-xss-in-katex-render-error-fallback"},{"cve":"CVE-2026-54011","cvss":8.7,"epss":0.0034,"slug":"cve-2026-54011-open-webui-stored-xss-in-mermaid-markdown-preview","title":"Open WebUI stored XSS in Mermaid Markdown preview","severity":"high","exploited":false,"published_at":"2026-06-23T18:18:06.31+00:00","url":"https://junglewise.ai/threats/cve-2026-54011-open-webui-stored-xss-in-mermaid-markdown-preview"},{"cve":"CVE-2025-65959","cvss":8.7,"epss":0.0024,"slug":"cve-2025-65959-open-webui-stored-dom-xss-in-note-pdf-download","title":"Open WebUI stored DOM XSS in Note PDF download","severity":"high","exploited":false,"published_at":"2025-12-04T21:16:08.97+00:00","url":"https://junglewise.ai/threats/cve-2025-65959-open-webui-stored-dom-xss-in-note-pdf-download"},{"cve":"CVE-2026-45315","cvss":8.7,"epss":0.0019,"slug":"cve-2026-45315-open-webui-stored-xss-in-audio-transcription-upload","title":"Open WebUI stored XSS in audio transcription upload","severity":"high","exploited":false,"published_at":"2026-05-15T22:16:54.25+00:00","url":"https://junglewise.ai/threats/cve-2026-45315-open-webui-stored-xss-in-audio-transcription-upload"},{"cve":"CVE-2026-54008","cvss":8.5,"epss":0.0033,"slug":"cve-2026-54008-open-webui-ssrf-via-redirect-bypass-in-oauth-profile-picture","title":"Open WebUI SSRF via redirect bypass in OAuth profile picture processing","severity":"high","exploited":false,"published_at":"2026-06-23T18:18:05.927+00:00","url":"https://junglewise.ai/threats/cve-2026-54008-open-webui-ssrf-via-redirect-bypass-in-oauth-profile-picture"},{"cve":"CVE-2026-45401","cvss":8.5,"epss":0.0033,"slug":"cve-2026-45401-open-webui-ssrf-bypass-via-http-redirect-following","title":"Open WebUI SSRF bypass via HTTP redirect following","severity":"high","exploited":false,"published_at":"2026-05-15T21:16:38.14+00:00","url":"https://junglewise.ai/threats/cve-2026-45401-open-webui-ssrf-bypass-via-http-redirect-following"}],"generated_at":"2026-11-12T03:07:00.164048+00:00","technologies":[{"name":"Open WebUI","slug":"open-webui-open-webui","vulnerabilities":18,"url":"https://junglewise.ai/threats/technologies/open-webui-open-webui"}]}