Security advisories

high2026-05-14

CVE-2026-45398-Open WebUI Vulnerable to IDOR: Retrieval API Bypasses Knowledge Base Access Controls

open-webui/open-webui · GHSA-4g37-7p2c-38r9

medium2026-05-14

CVE-2026-45397-Open WebUI Vulnerable to Unauthenticated RAG Configuration Disclosure

open-webui/open-webui · GHSA-65pg-qhhw-mxwg

medium2026-05-14

CVE-2026-45396-Open WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data Manipulation

open-webui/open-webui · GHSA-rjmp-vjf2-qf4g

high2026-05-14

CVE-2026-45395-Open WebUI: Missing `workspace.tools` Authorization Check on Tool Update Endpoint Allows Privilege Escalation to Code Execution

open-webui/open-webui · GHSA-p4fx-23fq-jfg6

medium2026-05-14

CVE-2026-45387-Open WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt leakage)

open-webui/open-webui · GHSA-h2cw-7qw9-56xr

medium2026-05-14

CVE-2026-45386-Open WebUI has an IDOR vulnerability in the pin_channel_message API endpoint

open-webui/open-webui · GHSA-5gc6-xhv4-2wg6

medium2026-05-14

CVE-2026-45385-Open WebUI has an IDOR vulnerability in the update_message_by_id API endpoint

open-webui/open-webui · GHSA-wwhq-cx22-f7vv

medium2026-05-14

CVE-2026-45365-Open WebUI: Authenticated users can bypass model access control via exposed query parameter [AI-ASSISTED]

open-webui/open-webui · GHSA-v6qf-75pr-p96m

medium2026-05-14

CVE-2026-45351-Open WebUI Exposes System Prompt to Regular User [Non-Admin]

open-webui/open-webui · GHSA-jh9g-8jqw-m2qx

high2026-05-14

CVE-2026-45350-Open WebUI's chat completion API allows tool restrictions to be bypassed

open-webui/open-webui · GHSA-4pcg-253r-rf9w

high2026-05-14

CVE-2026-45349-Open WebUI has Broken Access Control for Completions API

open-webui/open-webui · GHSA-gfm2-xm6c-37qc

high2026-05-14

CVE-2026-45348-pyLoad is vulnerable to stored XSS in Downloads view via unsanitized link URL in packages.js template literal

pyload/pyload · GHSA-fcjq-435v-jx94

high2026-05-14

CVE-2026-42570-Svelte devalue: DoS via sparse array deserialization

sveltejs/devalue · GHSA-77vg-94rm-hx3p

medium2026-05-14

CVE-2026-45347-Open WebUI vulnerable to blind server side request forgery (SSRF) via the PDF generate function

open-webui/open-webui · GHSA-f776-fp4w-266c

medium2026-05-14

CVE-2026-45346-Open WebUI Has Stored Cross-Site Scripting in SVG Renderer

open-webui/open-webui · GHSA-r29h-37fj-x2w6

medium2026-05-14

CVE-2026-45345-Open WebUI missing authorization check at the model update function - models from other users can be updated

open-webui/open-webui · GHSA-gm54-m39w-grjp

medium2026-05-14

CVE-2026-45339-Open WebUI's API key endpoint restrictions bypassed via `x-api-key` header — full message processing on restricted endpoints

open-webui/open-webui · GHSA-57q6-fvp4-pqmm

high2026-05-14

CVE-2026-45338-Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)

open-webui/open-webui · GHSA-24c9-2m8q-qhmh

medium2026-05-14

CVE-2026-42599-Svelte SSR vulnerable to cross-site scripting via spread attributes

sveltejs/svelte · GHSA-pr6f-5x2q-rwfp

high2026-05-14

CVE-2026-45331-Open WebUI has a full SSRF Vulnerability in the RAG Web Search Feature

open-webui/open-webui · GHSA-4v7r-f4w8-8972