Open WebUI Vulnerabilities

pip ML UI

AI Threat Alert tracks 169 known vulnerabilities in Open WebUI, 1 rated critical — an AI/ML ml ui in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources
38
Risk Score
169
Total CVEs
1
Critical
pip
Ecosystem
Sep 10, 2026
Last CVE
83%
Patch Rate
5d
Avg Time to Patch
153,277 stars 22,431 forks 324 issues 3 dependents Last push Sep 26, 2026
View on GitHub

Known Vulnerabilities (169 total, page 2 of 7)

Severity CVE ID Summary CVSS Published
HIGH CVE-2026-70492 Open WebUI: KaTeX fallback XSS steals admin session 8.7 Aug 4, 2026 MEDIUM CVE-2026-70493 open-webui: ReDoS via knowledge search DoS 6.5 Aug 4, 2026 HIGH CVE-2026-70494 Open WebUI: broken authz lets collaborator delete chats 8.1 Aug 4, 2026 HIGH CVE-2026-70479 Open WebUI: Playwright SSRF leaks cloud metadata 7.7 Aug 4, 2026 MEDIUM CVE-2026-70481 Open WebUI: members can edit/delete others' channel messages 5.4 Aug 4, 2026 HIGH CVE-2026-70482 Open WebUI: OAuth token exchange enables takeover 8.1 Aug 4, 2026 LOW CVE-2026-70483 Open WebUI: broken authz cancels other users' chats 3.1 Aug 4, 2026 MEDIUM CVE-2026-70480 Open WebUI: client-side SSRF via Vega chart rendering 4.1 Aug 4, 2026 MEDIUM CVE-2026-70484 open-webui: image-gen permission bypass in chat API 4.3 Aug 4, 2026 HIGH CVE-2026-70485 Open WebUI: NAT64 IPv6 trick bypasses SSRF filter, leaks metadata 7.1 Aug 4, 2026 HIGH CVE-2026-59714 Open WebUI: broken authz lets users overwrite channel chats 7.1 Jul 24, 2026 HIGH CVE-2026-56400 Open WebUI: CORS misconfig + CSRF enables admin RCE 8.3 Jul 15, 2026 HIGH CVE-2026-56398 Open WebUI: OAuth avatar stored XSS risks account takeover 7.3 Jul 15, 2026 HIGH CVE-2026-59221 Open WebUI: encoded path traversal in terminal proxy 7.7 Jul 9, 2026 MEDIUM CVE-2026-59222 Open WebUI: channel IDOR leaks tool-server API keys -- Jul 9, 2026 HIGH CVE-2026-59224 Open WebUI: terminal proxy allows user ID spoofing 8.0 Jul 9, 2026 MEDIUM CVE-2026-59225 Open WebUI: arena bypass reaches restricted models 5.4 Jul 9, 2026 MEDIUM CVE-2026-59223 Open WebUI: SSRF via web-fetch blocklist bypass 4.3 Jul 9, 2026 LOW CVE-2026-59215 Open WebUI: IDOR leaks private channel/DM threads 3.1 Jul 9, 2026 HIGH CVE-2026-59216 Open WebUI: session hijack enables cross-user code exec 7.7 Jul 9, 2026 HIGH CVE-2026-59219 Open WebUI: revoked JWTs bypass WebSocket auth 7.1 Jul 9, 2026 MEDIUM CVE-2026-59212 Open WebUI: IDOR lets read-only users write/delete files 5.4 Jul 9, 2026 LOW CVE-2026-59213 Open WebUI: cache leak exposes cross-user model lists 3.5 Jul 9, 2026 MEDIUM CVE-2026-59217 Open WebUI: read-only users can inject files into RAG KBs 4.3 Jul 9, 2026 MEDIUM CVE-2026-59220 Open WebUI: ReDoS in skill mentions blocks event loop 6.5 Jul 9, 2026

Showing 26–50 of 169

Frequently asked questions

What is Open WebUI?

Open WebUI is an AI/ML ml ui tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does Open WebUI have?

Open WebUI has 169 known CVEs, 1 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is Open WebUI distributed in?

Open WebUI is distributed via the pip ecosystem and categorized as ml ui.

Where does the Open WebUI vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of Open WebUI?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor Open WebUI in your stack

Get instant alerts when new vulnerabilities affect Open WebUI. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring