Open WebUI Vulnerabilities

pip ML UI

AI Threat Alert tracks 169 known vulnerabilities in Open WebUI, 1 rated critical — an AI/ML ml ui in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources
38
Risk Score
169
Total CVEs
1
Critical
pip
Ecosystem
Sep 10, 2026
Last CVE
83%
Patch Rate
5d
Avg Time to Patch
153,277 stars 22,431 forks 324 issues 3 dependents Last push Sep 26, 2026
View on GitHub

Known Vulnerabilities (169 total, page 6 of 7)

Severity CVE ID Summary CVSS Published
MEDIUM CVE-2026-44550 open-webui: mass assignment enables cross-user folder injection 5.0 May 8, 2026 HIGH CVE-2026-44553 open-webui: stale Socket.IO role allows cross-user note R/W 8.1 May 8, 2026 HIGH CVE-2026-44552 open-webui: Redis cache poisoning enables cross-instance tool hijack 8.7 May 8, 2026 HIGH CVE-2026-44555 open-webui: access control bypass via model chaining 7.6 May 8, 2026 HIGH CVE-2026-44556 open-webui: auth bypass allows unrestricted model access 7.1 May 8, 2026 MEDIUM CVE-2026-44558 open-webui: permission bypass exposes channels publicly 5.4 May 8, 2026 HIGH CVE-2026-44554 open-webui: RAG poisoning via unauthorized KB overwrite 8.1 May 8, 2026 MEDIUM CVE-2026-44557 open-webui: auth bypass exposes all knowledge base metadata 4.3 May 8, 2026 MEDIUM CVE-2026-44559 open-webui: private channel member list exposed to any user 4.3 May 8, 2026 MEDIUM CVE-2026-44562 open-webui: missing authz enables model hijacking 6.5 May 8, 2026 MEDIUM CVE-2026-44563 open-webui: auth bypass exposes restricted LLM models 5.4 May 8, 2026 HIGH CVE-2026-34222 Open WebUI: access control bypass leaks Tool Valve API keys 7.7 Apr 1, 2026 MEDIUM CVE-2026-28786 Open WebUI: path traversal leaks server filesystem path 4.3 Mar 27, 2026 HIGH CVE-2026-28788 Open WebUI: BOLA enables RAG poisoning via file overwrite 7.1 Mar 27, 2026 MEDIUM CVE-2026-29070 open-webui: missing authz allows cross-KB file deletion 5.4 Mar 27, 2026 LOW CVE-2026-29071 Open WebUI: IDOR exposes AI memories and private files 3.1 Mar 27, 2026 LOW CVE-2024-7038 open-webui: filesystem enumeration via admin error messages 2.7 Oct 9, 2024 MEDIUM CVE-2024-7037 open-webui: path traversal → arbitrary file write/RCE 6.5 Oct 9, 2024 MEDIUM CVE-2024-7041 open-webui: IDOR enables cross-user memory tampering 6.5 Oct 9, 2024 HIGH GHSA-5ccf-884p-4jjq open-webui: DoS via unauthenticated multipart parsing 7.5 Mar 20, 2025 HIGH CVE-2024-7043 Open WebUI: auth bypass exposes all user files 8.1 Mar 20, 2025 MEDIUM CVE-2024-7044 Open WebUI: Stored XSS via file upload, session hijack 6.8 Mar 20, 2025 MEDIUM CVE-2024-7045 open-webui: missing authz exposes admin prompts 4.3 Mar 20, 2025 HIGH CVE-2024-12537 Open-WebUI: unauthenticated DoS via code formatter 7.5 Mar 20, 2025 HIGH CVE-2024-7039 open-webui: Privilege bypass enables admin account deletion 8.3 Mar 20, 2025

Showing 126–150 of 169

Frequently asked questions

What is Open WebUI?

Open WebUI is an AI/ML ml ui tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does Open WebUI have?

Open WebUI has 169 known CVEs, 1 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is Open WebUI distributed in?

Open WebUI is distributed via the pip ecosystem and categorized as ml ui.

Where does the Open WebUI vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of Open WebUI?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor Open WebUI in your stack

Get instant alerts when new vulnerabilities affect Open WebUI. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring