AI Security Threat Feed

mistune: XSS via unescaped heading id= attribute

CVE-2026-44897

6.1

Code Execution Data Extraction Framework RAG

mistune Patch: 3.2.1 CWE-79 463 4 ATLAS

LangChain: deserialization poisons LLM chat history

CVE-2026-44843

8.2

Prompt Injection Code Execution Supply Chain Framework Agent

langchain-core Patch: 1.3.3 CWE-502 4.3K 5 ATLAS

Open WebUI: path traversal + file upload leads to RCE

CVE-2026-44566

7.3

Code Execution Supply Chain Inference Model

open-webui Patch: 0.1.124 CWE-22 5 ATLAS

Open WebUI: auth bypass gives pending users full LLM access

CVE-2026-44567

7.3

Auth Bypass Data Extraction DoS API Inference

open-webui Patch: 0.1.124 CWE-862 4 ATLAS

open-webui: XSS via XLSX preview enables session hijack

CVE-2026-44549

7.3

Code Execution Data Extraction Auth Bypass Framework API

open-webui Patch: 0.8.0 CWE-79 7 ATLAS

open-webui: XSS in pending overlay enables session hijack

CVE-2026-44568

4.8

Data Extraction Code Execution Social Engineering Inference Framework

open-webui Patch: 0.9.0 CWE-79 4 ATLAS

banks: SSTI enables RCE via unsandboxed Jinja2 templates

CVE-2026-44209

7.5

Code Execution Supply Chain Framework Agent

banks Patch: 2.4.2 CWE-1336 154 4 ATLAS

open-webui: RAG auth bypass exposes private files

CVE-2026-44560

6.5

Auth Bypass Data Extraction Privacy Violation RAG API Framework

open-webui Patch: 0.9.0 CWE-862 5 ATLAS

open-webui: auth bypass exposes private group channels

CVE-2026-44561

Auth Bypass Data Extraction Privacy Violation API

open-webui Patch: 0.9.0 CWE-284 4 ATLAS

open-webui: auth bypass in collaborative doc editing

CVE-2026-44564

Auth Bypass Prompt Injection DoS API Framework

open-webui Patch: 0.9.0 CWE-863 4 ATLAS

open-webui: auth bypass exposes restricted LLM models

CVE-2026-44563

Auth Bypass Data Extraction Inference API

open-webui Patch: 0.9.0 CWE-862 5 ATLAS

open-webui: missing authz enables model hijacking

CVE-2026-44562

6.5

Auth Bypass Model Poisoning Data Extraction Model API Framework

open-webui Patch: 0.9.0 CWE-862 5 ATLAS

open-webui: private channel member list exposed to any user

CVE-2026-44559

4.3

Auth Bypass Data Extraction Privacy Violation API Framework

open-webui Patch: 0.9.0 CWE-862 4 ATLAS

open-webui: auth bypass exposes all knowledge base metadata

CVE-2026-44557

4.3

Auth Bypass Data Extraction Privacy Violation RAG Framework API

open-webui Patch: 0.9.0 CWE-200 5 ATLAS

open-webui: RAG poisoning via unauthorized KB overwrite

CVE-2026-44554

8.1

Auth Bypass Model Poisoning Prompt Injection RAG API Framework

open-webui Patch: 0.9.0 CWE-862 8 ATLAS

open-webui: permission bypass exposes channels publicly

CVE-2026-44558

Auth Bypass Data Leakage API Framework

open-webui Patch: 0.9.0 CWE-863 3 ATLAS

open-webui: auth bypass allows unrestricted model access

CVE-2026-44556

7.1

Auth Bypass DoS Data Extraction API Inference Model

open-webui Patch: 0.9.0 CWE-284 8 ATLAS

Open WebUI's Base Model Routing Bypasses Access Control via Model Chaining

CVE-2026-44555

7.6

open-webui Patch: 0.9.0 CWE-862

Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning

CVE-2026-44552

8.7

open-webui Patch: 0.9.0 CWE-668

Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access

CVE-2026-44553

8.1