Open WebUI Vulnerabilities

pip ML UI

AI Threat Alert tracks 151 known vulnerabilities in Open WebUI, 1 rated critical — an AI/ML ml ui in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources
38
Risk Score
151
Total CVEs
1
Critical
pip
Ecosystem
Aug 4, 2026
Last CVE
81%
Patch Rate
6d
Avg Time to Patch
148,888 stars 21,678 forks 402 issues 4 dependents Last push Aug 15, 2026
View on GitHub

Known Vulnerabilities (151 total, page 2 of 7)

Severity CVE ID Summary CVSS Published
LOW CVE-2026-59215 Open WebUI: IDOR leaks private channel/DM threads 3.1 Jul 9, 2026 HIGH CVE-2026-59216 Open WebUI: session hijack enables cross-user code exec 7.7 Jul 9, 2026 HIGH CVE-2026-59219 Open WebUI: revoked JWTs bypass WebSocket auth 7.1 Jul 9, 2026 MEDIUM CVE-2026-59212 Open WebUI: IDOR lets read-only users write/delete files 5.4 Jul 9, 2026 LOW CVE-2026-59213 Open WebUI: cache leak exposes cross-user model lists 3.5 Jul 9, 2026 MEDIUM CVE-2026-59217 Open WebUI: read-only users can inject files into RAG KBs 4.3 Jul 9, 2026 MEDIUM CVE-2026-59220 Open WebUI: ReDoS in skill mentions blocks event loop 6.5 Jul 9, 2026 LOW CVE-2026-59226 Open WebUI: deactivated users retain automation access 3.1 Jul 9, 2026 MEDIUM CVE-2026-59227 Open WebUI: image-edit API bypasses admin permission gate 4.3 Jul 9, 2026 LOW CVE-2026-59715 Open WebUI: unauth Socket.IO bypass alters doc state 3.1 Jul 9, 2026 HIGH CVE-2026-59214 Open WebUI: Pyodide sandbox bypass reaches admin RCE 7.3 Jul 9, 2026 MEDIUM CVE-2026-59218 Open WebUI: timing leak enables account enumeration 5.3 Jul 9, 2026 MEDIUM CVE-2025-46571 Open WebUI: Stored XSS via HTML upload enables admin RCE -- Jul 7, 2026 HIGH CVE-2025-46719 Open WebUI: chat XSS steals tokens, admin RCE -- Jul 7, 2026 HIGH CVE-2026-26192 Open WebUI: stored XSS via citation iFrame → admin RCE 7.3 Jul 7, 2026 HIGH CVE-2026-26193 Open WebUI: stored XSS via chat 'embeds' iframe escape 7.3 Jul 7, 2026 MEDIUM CVE-2026-34225 open-webui: blind SSRF via image-edit URL fetch 4.3 Jul 7, 2026 MEDIUM CVE-2026-56399 Open WebUI: SSRF in web retrieval hits internal services 5.0 Jun 30, 2026 HIGH CVE-2026-54017 open-webui: double-encoded path traversal in terminal proxy 7.7 Jun 17, 2026 HIGH CVE-2026-54018 open-webui: SSRF via redirect bypass in Playwright loader 7.7 Jun 17, 2026 MEDIUM CVE-2026-54019 open-webui: RAG ACL bypass exposes private KB chunks 6.5 Jun 17, 2026 MEDIUM CVE-2026-54021 open-webui: auth bypass reaches restricted Ollama backends 6.3 Jun 17, 2026 MEDIUM CVE-2026-54022 open-webui: Yjs auth bypass exposes all user notes 5.3 Jun 17, 2026 MEDIUM CVE-2026-54006 open-webui: auth bypass allows cross-user calendar injection 4.3 Jun 17, 2026 HIGH CVE-2026-54007 open-webui: cross-origin postMessage forces model execution -- Jun 17, 2026

Showing 26–50 of 151

Frequently asked questions

What is Open WebUI?

Open WebUI is an AI/ML ml ui tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does Open WebUI have?

Open WebUI has 151 known CVEs, 1 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is Open WebUI distributed in?

Open WebUI is distributed via the pip ecosystem and categorized as ml ui.

Where does the Open WebUI vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of Open WebUI?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor Open WebUI in your stack

Get instant alerts when new vulnerabilities affect Open WebUI. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring