Open WebUI Vulnerabilities

pip ML UI

AI Threat Alert tracks 151 known vulnerabilities in Open WebUI, 1 rated critical — an AI/ML ml ui in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources
38
Risk Score
151
Total CVEs
1
Critical
pip
Ecosystem
Aug 4, 2026
Last CVE
81%
Patch Rate
6d
Avg Time to Patch
148,888 stars 21,678 forks 402 issues 4 dependents Last push Aug 15, 2026
View on GitHub

Known Vulnerabilities (151 total, page 1 of 7)

Severity CVE ID Summary CVSS Published
HIGH CVE-2026-70486 Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-origin 8.2 Aug 4, 2026 MEDIUM CVE-2026-70488 Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanup 4.3 Aug 4, 2026 MEDIUM CVE-2026-70487 Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadata 5.3 Aug 4, 2026 MEDIUM CVE-2026-54020 Open WebUI: DNS Rebinding SSRF Bypass 6.3 Aug 4, 2026 MEDIUM CVE-2026-70489 Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing 6.5 Aug 4, 2026 MEDIUM CVE-2026-70490 Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role check 6.3 Aug 4, 2026 MEDIUM CVE-2026-70491 Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints 6.5 Aug 4, 2026 HIGH CVE-2026-70492 Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages 8.7 Aug 4, 2026 MEDIUM CVE-2026-70493 Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrophically 6.5 Aug 4, 2026 HIGH CVE-2026-70494 Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder 8.1 Aug 4, 2026 HIGH CVE-2026-70479 Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader 7.7 Aug 4, 2026 MEDIUM CVE-2026-70481 Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages 5.4 Aug 4, 2026 HIGH CVE-2026-70482 Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client 8.1 Aug 4, 2026 LOW CVE-2026-70483 Open WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpoint 3.1 Aug 4, 2026 MEDIUM CVE-2026-70480 Open WebUI: Client-side SSRF via unrestricted external resource loading in Vega/Vega-Lite chart rendering 4.1 Aug 4, 2026 MEDIUM CVE-2026-70484 Open WebUI: Users denied the image-generation permission can still generate images via chat completions 4.3 Aug 4, 2026 HIGH CVE-2026-70485 Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs 7.1 Aug 4, 2026 HIGH CVE-2026-59714 Open WebUI: broken authz lets users overwrite channel chats 7.1 Jul 24, 2026 HIGH CVE-2026-56400 Open WebUI: CORS misconfig + CSRF enables admin RCE 8.3 Jul 15, 2026 HIGH CVE-2026-56398 Open WebUI: OAuth avatar stored XSS risks account takeover 7.3 Jul 15, 2026 HIGH CVE-2026-59221 Open WebUI: encoded path traversal in terminal proxy 7.7 Jul 9, 2026 MEDIUM CVE-2026-59222 Open WebUI: channel IDOR leaks tool-server API keys -- Jul 9, 2026 HIGH CVE-2026-59224 Open WebUI: terminal proxy allows user ID spoofing 8.0 Jul 9, 2026 MEDIUM CVE-2026-59225 Open WebUI: arena bypass reaches restricted models 5.4 Jul 9, 2026 MEDIUM CVE-2026-59223 Open WebUI: SSRF via web-fetch blocklist bypass 4.3 Jul 9, 2026

Showing 1–25 of 151

Frequently asked questions

What is Open WebUI?

Open WebUI is an AI/ML ml ui tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does Open WebUI have?

Open WebUI has 151 known CVEs, 1 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is Open WebUI distributed in?

Open WebUI is distributed via the pip ecosystem and categorized as ml ui.

Where does the Open WebUI vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of Open WebUI?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor Open WebUI in your stack

Get instant alerts when new vulnerabilities affect Open WebUI. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring