Security advisories

medium2026-05-08

CVE-2026-44557-Open WebUI vulnerable to Global Knowledge Base Enumeration via knowledge-bases Meta-Collection

open-webui/open-webui · GHSA-6c2x-gcp3-gp73

high2026-05-08

CVE-2026-44554-Open WebUI has Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection Overwrite

open-webui/open-webui · GHSA-7r82-qhg4-6wvj

medium2026-05-08

CVE-2026-44558-Open WebUI's Channel Access Grants Bypass filter_allowed_access_grants

open-webui/open-webui · GHSA-7rjh-px4v-5w55

high2026-05-08

CVE-2026-44556-Open WebUI's responses passthrough endpoint lacks access control authorization

open-webui/open-webui · GHSA-hp5m-24vp-vq2q

high2026-05-08

CVE-2026-44555-Open WebUI's Base Model Routing Bypasses Access Control via Model Chaining

open-webui/open-webui · GHSA-9vvh-qmjx-p4q8

high2026-05-08

CVE-2026-44552-Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning

open-webui/open-webui · GHSA-3x8w-4f7p-xxc2

high2026-05-08

CVE-2026-44553-Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access

open-webui/open-webui · GHSA-45m8-cpm2-3v65

medium2026-05-08

CVE-2026-44550-Open WebUI's Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts

open-webui/open-webui · GHSA-hr43-rjmr-7wmm

critical2026-05-08

CVE-2026-44551-Open WebUI has an LDAP Empty Password Authentication Bypass

open-webui/open-webui · GHSA-2r4p-jpmg-48f4

medium2026-05-08

CVE-2026-44737-Grav: Stored XSS via page title (data[header][title]) in admin panel

getgrav/grav · GHSA-fmg2-f5r9-24qc

high2026-05-08

CVE-2026-44680-MikroORM has SQL injection via runtime-controlled identifiers and JSON-path keys

mikro-orm/mikro-orm · GHSA-cfw5-68c4-ffqp

high2026-05-08

CVE-2026-6322-fast-uri vulnerable to host confusion via percent-encoded authority delimiters

fastify/fast-uri · GHSA-v39h-62p7-jpjc

high2026-05-08

CVE-2026-44499-Zebra has Permanent Block Discovery Halt via Gossip Queue Saturation and Syncer Poisoning

zcashfoundation/zebra · GHSA-h9hm-m2xj-4rq9

medium2026-05-08

CVE-2026-44502-Bunsink has an SSRF bypass in `validate_webhook_url`

bugsink/bugsink · GHSA-fp53-qcf8-2xx2

critical2026-05-08

CVE-2026-44588-SiYuan: Electron Renderer RCE via decodeURIComponent-driven tooltip XSS in aria-label sink (incomplete fix for CVE-2026-34585)

siyuan-note/siyuan · GHSA-25rp-h46x-2hjm

high2026-05-08

CVE-2026-44721-open-webui Vulnerable to Stored XSS via Model Description

open-webui/open-webui · GHSA-gf5m-wcrh-7928

critical2026-05-08

CVE-2026-43944-Electerm users can run dangrous code through link or command line

electerm/electerm · GHSA-mpm8-cx2p-626q

high2026-05-08

CVE-2026-43943-Electerm Security Vulnerability: RCE via malicious SSH server filename in openFileWithEditor

electerm/electerm · GHSA-q4p8-8j9m-8hxj

medium2026-05-08

CVE-2026-43942-Electerm's full process.env exposed to renderer via window.pre.env

electerm/electerm · GHSA-37j4-88rp-2f6h

high2026-05-08

CVE-2026-43941-Electerm has an unvalidated shell.openExternal that allows arbitrary protocol execution via terminal link click

electerm/electerm · GHSA-fwf6-j56g-m97c