AI Threat Alert
Open-Webui
AI Threat Alert tracks 20 known AI/ML vulnerabilities affecting Open-Webui products — each enriched with CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis. Browse every Open-Webui CVE below, sorted by severity and recency.
| Severity | CVE | Headline | Package | CVSS |
|---|---|---|---|---|
| MEDIUM | CVE-2026-56399 | Open WebUI: SSRF in web retrieval hits internal services | open-webui | 5.0 |
| MEDIUM | CVE-2026-59218 | Open WebUI: timing leak enables account enumeration | open-webui | 5.3 |
| HIGH | CVE-2026-59214 | Open WebUI: Pyodide sandbox bypass reaches admin RCE | open-webui | 7.3 |
| LOW | CVE-2026-59715 | Open WebUI: unauth Socket.IO bypass alters doc state | open-webui | 3.1 |
| MEDIUM | CVE-2026-59227 | Open WebUI: image-edit API bypasses admin permission gate | open-webui | 4.3 |
| LOW | CVE-2026-59226 | Open WebUI: deactivated users retain automation access | open-webui | 3.1 |
| MEDIUM | CVE-2026-59220 | Open WebUI: ReDoS in skill mentions blocks event loop | open-webui | 6.5 |
| MEDIUM | CVE-2026-59217 | Open WebUI: read-only users can inject files into RAG KBs | open-webui | 4.3 |
| LOW | CVE-2026-59213 | Open WebUI: cache leak exposes cross-user model lists | open-webui | 3.5 |
| MEDIUM | CVE-2026-59212 | Open WebUI: IDOR lets read-only users write/delete files | open-webui | 5.4 |
| HIGH | CVE-2026-59219 | Open WebUI: revoked JWTs bypass WebSocket auth | open-webui | 7.1 |
| LOW | CVE-2026-59215 | Open WebUI: IDOR leaks private channel/DM threads | open-webui | 3.1 |
| HIGH | CVE-2026-59216 | Open WebUI: session hijack enables cross-user code exec | open-webui | 7.7 |
| MEDIUM | CVE-2026-59223 | Open WebUI: SSRF via web-fetch blocklist bypass | open-webui | 4.3 |
| HIGH | CVE-2026-59224 | Open WebUI: terminal proxy allows user ID spoofing | open-webui | 8.0 |
| MEDIUM | CVE-2026-59225 | Open WebUI: arena bypass reaches restricted models | open-webui | 5.4 |
| MEDIUM | CVE-2026-59222 | Open WebUI: channel IDOR leaks tool-server API keys | open-webui | - |
| HIGH | CVE-2026-59221 | Open WebUI: encoded path traversal in terminal proxy | open-webui | 7.7 |
| HIGH | CVE-2026-56398 | Open WebUI: OAuth avatar stored XSS risks account takeover | open-webui | 7.3 |
| HIGH | CVE-2026-56400 | Open WebUI: CORS misconfig + CSRF enables admin RCE | open-webui | 8.3 |
Frequently asked questions
How many known vulnerabilities affect Open-Webui?
20 AI/ML CVEs affecting Open-Webui products are tracked, sourced from NVD and GitHub Advisory.
What Open-Webui products are affected?
The CVEs below map to the Open-Webui AI/ML packages and tools tracked by AI Threat Alert; open any CVE to see the affected components and versions.
Where does the Open-Webui vulnerability data come from?
Data is sourced from NVD and GitHub Advisory, then enriched with CVSS severity, EPSS exploit probability, and patch status for each CVE.
How can I monitor Open-Webui for new vulnerabilities?
AI Threat Alert tracks Open-Webui continuously; a Pro subscription adds breaking alerts when new CVEs affecting Open-Webui are published.
How do I assess Open-Webui's security exposure?
Each CVE below carries CVSS severity and exploitation signals, so you can review the highest-severity Open-Webui issues first and judge the exposure for your stack.