Description Summary:
Open WebUI suffers from missing and incorrect authorization flaws that allow authenticated users to perform unauthorized actions.

Executive Summary:
Open WebUI versions 0.10.0 through 0.10.x contain authorization vulnerabilities that could allow authenticated users to exceed their intended privileges and compromise system integrity.

Vulnerability Details

CVE-ID: CVE-2026-70494

Affected Software: Open WebUI Open WebUI

Affected Versions: >= 0.10.0, < 0.11.0

Vulnerability: The software fails to properly enforce authorization checks (CWE-862 and CWE-863), allowing an authenticated user to perform restricted operations.

Business Impact

With a CVSS score of 8.1, these authorization flaws pose a significant threat to the security of the AI platform. A malicious or compromised authenticated user could manipulate system settings or trigger unauthorized actions, leading to a loss of data integrity and potential service disruption.

Remediation Plan

Immediate Action: Update Open WebUI to version 0.11.0 or later to apply the necessary authorization fixes.

Proactive Monitoring: Monitor audit logs for unusual administrative activity or unauthorized modifications performed by standard user accounts.

Compensating Controls: Restrict access to the Open WebUI instance to trusted networks and enforce the principle of least privilege for all platform users.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 5, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Authorization bypasses of this nature are often targeted by internal threats or compromised accounts.

Analyst Recommendation

The update to version 0.11.0 is essential to restore proper access control enforcement. Administrators should verify the patch deployment across all instances and review user permissions to ensure no unauthorized configurations were established prior to the update.

Description Summary:
A stored cross-site scripting (XSS) vulnerability in Open WebUI allows authenticated attackers with low privileges to execute arbitrary scripts in the context of other users' sessions.

Executive Summary:
A high-severity cross-site scripting vulnerability in Open WebUI allows authenticated attackers to compromise user sessions and perform unauthorized actions through malicious script injection.

Vulnerability Details

CVE-ID: CVE-2026-70492

Affected Software: open-webui open-webui

Affected Versions: >= 0.10.0, < 0.11.0

Vulnerability: This is a stored Cross-Site Scripting (XSS) vulnerability (CWE-79) resulting from improper neutralization of user-supplied input during web page generation. The vulnerability requires the attacker to be authenticated (PR:L) and involves user interaction (UI:R) to execute the malicious payload.

Business Impact

An attacker successfully exploiting this XSS vulnerability could hijack user sessions, steal sensitive information, or perform unauthorized actions on behalf of other users, including administrative accounts. With a CVSS score of 8.7, this flaw poses a substantial risk to data integrity and confidentiality within the AI platform, potentially leading to unauthorized access to proprietary data or AI model configurations.

Remediation Plan

Immediate Action: Update Open WebUI to version 0.11.0 or later to patch the input sanitization flaw.

Proactive Monitoring: Inspect application logs for unusual request patterns, particularly those involving script tags or unexpected encoded characters in input fields.

Compensating Controls: Ensure that Content Security Policy (CSP) headers are strictly configured to prevent the execution of unauthorized scripts within the browser.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 5, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. XSS vulnerabilities in collaborative platforms are highly effective for lateral movement and account takeover.

Analyst Recommendation

Administrators must perform an immediate update to the latest patched version of Open WebUI. Given the potential for session compromise, organizations should also review recent audit logs for any suspicious account activity that may have occurred prior to patching.

Description Summary:
Open WebUI is susceptible to Cross-site Scripting and UI layer restriction flaws that could allow an authenticated attacker to execute malicious scripts or manipulate the interface.

Executive Summary:
An authenticated vulnerability in the Open WebUI platform could allow attackers to perform Cross-site Scripting and UI manipulation, potentially leading to unauthorized actions within the application.

Vulnerability Details

CVE-ID: CVE-2026-70486

Affected Software: open-webui open-webui

Affected Versions: >= 0.9.0, < 0.11.0

Vulnerability: This issue encompasses CWE-79 and CWE-1021, involving improper neutralization of input and insufficient restriction of UI layers. These vulnerabilities require the attacker to possess low-level privileges (authenticated) to trigger the malicious payload.

Business Impact

Successful exploitation allows an attacker to inject scripts that execute in the context of a user session, leading to potential data theft, session hijacking, or unauthorized interface interactions. With a CVSS score of 8.2, this vulnerability represents a significant risk to the integrity and confidentiality of the AI platform, especially in environments where users trust the generated output.

Remediation Plan

Immediate Action: Upgrade open-webui to version 0.11.0 or later to incorporate the security patches provided by the vendor.

Proactive Monitoring: Monitor application logs for suspicious script injections or unusual UI-related behavior originating from authenticated user accounts.

Compensating Controls: Implement a Content Security Policy (CSP) to restrict the execution of unauthorized scripts and utilize a Web Application Firewall (WAF) to filter malicious input patterns.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 5, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability's reliance on authenticated access limits the attack surface, but the high severity score warrants prompt patching.

Analyst Recommendation

The vulnerabilities identified in Open WebUI present a high risk to organizational data and platform integrity. Administrators should prioritize the update to version 0.11.0 to ensure these security flaws are fully remediated and to prevent potential unauthorized access or script execution.

Description Summary:
Open WebUI is susceptible to an improper authentication flaw that can be exploited by an attacker via user interaction.

Executive Summary:
Open WebUI versions 0.8.0 through 0.10.x are vulnerable to an improper authentication flaw that could allow an attacker to gain unauthorized access to sensitive information.

Vulnerability Details

CVE-ID: CVE-2026-70482

Affected Software: Open WebUI Open WebUI

Affected Versions: >= 0.8.0, < 0.11.0

Vulnerability: This is an improper authentication vulnerability (CWE-287) that requires user interaction and is exploitable by an unauthenticated attacker.

Business Impact

The CVSS score of 8.1 reflects the high potential for data compromise or unauthorized administrative actions. Successful exploitation could allow an attacker to intercept sensitive data or perform actions on behalf of a victim, resulting in severe reputational or operational impact.

Remediation Plan

Immediate Action: Update Open WebUI to version 0.11.0 or later to resolve the underlying authentication weakness.

Proactive Monitoring: Review application logs for suspicious authentication events or unexpected redirects that might indicate an attempt to exploit user-interaction-based vulnerabilities.

Compensating Controls: Educate users on the risks of clicking suspicious links and utilize browser-based security extensions to mitigate potential cross-site or interception-based attacks.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 5, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The requirement for user interaction adds a layer of complexity to the attack, but it remains a critical risk for high-traffic environments.

Analyst Recommendation

Upgrading to version 0.11.0 is the only reliable way to eliminate this risk. Due to the high CVSS score and the potential for unauthorized data access, this update should be prioritized in the next maintenance cycle.

Description Summary:
Open WebUI is vulnerable to authentication bypass and spoofing, which could allow a remote, authenticated user to achieve total system compromise through cross-site scripting or related vectors.

Executive Summary:
An authentication bypass and spoofing vulnerability in Open WebUI versions prior to 0.10.0 allows attackers to achieve unauthorized control over the self-hosted AI platform.

Vulnerability Details

CVE-ID: CVE-2026-59224

Affected Software: open-webui open-webui

Affected Versions: < 0.10.0

Vulnerability: This vulnerability is rooted in improper authentication and spoofing mechanisms. An authenticated attacker can exploit these weaknesses to bypass security controls, potentially leading to unauthorized access and complete compromise of the platform.

Business Impact

The CVSS score of 8.0 indicates a high-severity risk. Since Open WebUI is a self-hosted AI platform, a successful exploit could lead to full administrative takeover, unauthorized data access, and the potential for the platform to be used as a pivot point for further attacks within the internal network.

Remediation Plan

Immediate Action: Update Open WebUI to version 0.10.0 or higher immediately to resolve the authentication bypass flaws.

Proactive Monitoring: Review audit logs for suspicious login activity, unauthorized changes to administrative settings, or unexpected session tokens that might indicate an authentication bypass attempt.

Compensating Controls: Restrict network access to the Open WebUI instance using a VPN or IP allowlisting to ensure only trusted users can interact with the interface.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 10, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability represents a critical risk to the security of your self-hosted AI infrastructure. Administrators must immediately upgrade to version 0.10.0 to mitigate the risk of authentication bypass and prevent unauthorized access to sensitive system resources.

Description Summary:
Open WebUI is susceptible to path traversal and server-side request forgery (SSRF) vulnerabilities.

Executive Summary:
Path traversal and SSRF vulnerabilities in open-webui allow attackers to access restricted resources, necessitating an immediate update to version 0.10.0.

Vulnerability Details

CVE-ID: CVE-2026-59221

Affected Software: open-webui open-webui

Affected Versions: >= 0.9.6, < 0.10.0

Vulnerability: The product fails to properly sanitize pathnames and validate requests, leading to path traversal (CWE-22) and server-side request forgery (CWE-918). These issues allow an authenticated attacker to read sensitive files or interact with internal network services.

Business Impact

With a CVSS score of 7.7, this vulnerability presents a high risk to the confidentiality of the AI platform and the internal network. Attackers can potentially access configuration files, credentials, or internal APIs, which may lead to deeper infiltration of the corporate environment.

Remediation Plan

Immediate Action: Upgrade to open-webui version 0.10.0 or later to patch the path handling and request validation mechanisms.

Proactive Monitoring: Review access logs for suspicious path patterns (e.g., ../) and unusual outbound network requests originating from the web server.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block path traversal attempts and restrict outbound traffic from the application server.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 11, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The combination of path traversal and SSRF in an AI platform is highly dangerous. Administrators should prioritize upgrading to version 0.10.0 to remediate these flaws and prevent unauthorized access to the application's underlying filesystem and internal network.

Description Summary:
Open WebUI is vulnerable to code injection, unauthorized information exposure, and authorization bypass, allowing authenticated users with specific access to impact the platform's integrity.

Executive Summary:
A high-severity security vulnerability in Open WebUI allows authenticated attackers to perform code injection and bypass authorization controls, potentially leading to unauthorized system access.

Vulnerability Details

CVE-ID: CVE-2026-59216

Affected Software: Open WebUI

Affected Versions: < 0.10.0

Vulnerability: This vulnerability involves multiple weaknesses, including Improper Control of Generation of Code (CWE-94), Exposure of Sensitive Information (CWE-200), and Authorization Bypass through user-controlled keys (CWE-639). The attack requires an authenticated user to perform these actions, which can result in significant impact on the platform's security.

Business Impact

The exploitation of this vulnerability poses a severe risk to organizational data and system integrity. With a CVSS score of 7.7, the ability for an authenticated attacker to inject code or bypass authorization mechanisms can lead to unauthorized access to sensitive AI models, configuration data, or internal system processes, potentially resulting in complete compromise of the platform.

Remediation Plan

Immediate Action: Upgrade Open WebUI to version 0.10.0 or later to resolve the underlying code injection and authorization flaws.

Proactive Monitoring: Review system and application access logs for unusual activity, specifically focusing on unauthorized API calls or unexpected code execution patterns.

Compensating Controls: Implement strict network segmentation and utilize a Web Application Firewall (WAF) to filter suspicious requests that may attempt to exploit injection vectors while the update is being staged.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 11, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The combination of code injection and authorization bypass vulnerabilities presents a critical risk to the Open WebUI platform. Administrators must prioritize updating to version 0.10.0 immediately to eliminate these attack vectors and protect sensitive AI-driven workflows from unauthorized manipulation.

Description Summary:
A vulnerability in Open WebUI involving insufficient session expiration allows for potential unauthorized access.

Executive Summary:
An insufficient session expiration vulnerability in Open WebUI exposes the platform to unauthorized access and potential remote code execution.

Vulnerability Details

CVE-ID: CVE-2026-56400

Affected Software: Open WebUI

Affected Versions: 0.x up to (excluding) 0.3.14

Vulnerability: This vulnerability is caused by insufficient session expiration (CWE-613), which, when combined with CORS misconfigurations, allows an unauthenticated attacker to bypass security controls.

Business Impact

The potential impact of this vulnerability is critical, as it could lead to full system compromise, including unauthorized access to data and the execution of arbitrary code on the host server. With a CVSS score of 8.3, this represents a significant threat to organizational data integrity and system availability.

Remediation Plan

Immediate Action: Update the Open WebUI package to version 0.3.33 or later to apply the necessary security fixes.

Proactive Monitoring: Monitor server logs for unusual session activity or unauthorized access attempts originating from unexpected origins.

Compensating Controls: Implement strict CORS policies at the network level and restrict access to the web interface to trusted IP addresses using a reverse proxy or VPN.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 17, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment, a proof-of-concept exists, so exploitation risk should be treated as credible.

Analyst Recommendation

Given the potential for remote code execution and the confirmed existence of proof-of-concept material, administrators should prioritize updating Open WebUI immediately. Failure to patch creates a high-risk exposure point that could be leveraged by attackers to gain control over the application environment.

Description Summary:
Open WebUI is a self-hosted artificial intelligence platform that contains an unspecified security vulnerability requiring immediate attention.

Executive Summary:
The Open WebUI platform is susceptible to a high-severity vulnerability that could facilitate unauthorized system access or compromise of the local AI environment.

Vulnerability Details

CVE-ID: CVE-2026-54018

Affected Software: Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This is an unspecified security flaw within the Open WebUI platform. The vulnerability relates to the software's handling of user requests, though the precise authentication requirements remain undisclosed pending further vendor disclosure.

Business Impact

Successful exploitation of this vulnerability could lead to the unauthorized manipulation of the artificial intelligence platform, potentially resulting in the leakage of sensitive data processed by the models or complete unauthorized access to the host infrastructure. With a CVSS score of 7.7, this flaw poses a High risk to organizational security, necessitating prioritized remediation to prevent potential data exfiltration or service disruption.

Remediation Plan

Immediate Action: Administrators must monitor the official Open WebUI repository and vendor security bulletins to apply the latest security patches as soon as they become available.

Proactive Monitoring: Security teams should review system access logs for anomalous behavior, such as unauthorized API calls or unexpected administrative actions within the WebUI interface.

Compensating Controls: Deploy Web Application Firewall (WAF) rules to filter suspicious traffic and restrict network access to the Open WebUI instance to only known, trusted IP addresses.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 24, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw and the sensitivity of the data typically handled by AI platforms, the potential for exploitation remains significant.

Analyst Recommendation

Given the High severity of this vulnerability, organizations currently utilizing Open WebUI must maintain a heightened state of vigilance. It is imperative to track vendor advisories closely and schedule an emergency maintenance window to apply the necessary updates immediately upon release to mitigate the risk of exploitation.

Description Summary:
Open WebUI contains a high-severity security vulnerability that could potentially allow unauthorized access or system compromise.

Executive Summary:
A high-severity vulnerability in the Open WebUI platform poses a significant risk of unauthorized access and potential system exploitation.

Vulnerability Details

CVE-ID: CVE-2026-54011

Affected Software: Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability relates to flaws within the Open WebUI platform that may allow attackers to bypass security controls. Further technical analysis is required to determine the specific authentication requirements, though the current CVSS score suggests a high impact on system integrity and confidentiality.

Business Impact

Successful exploitation of this vulnerability could result in unauthorized access to sensitive artificial intelligence models and user data stored within the self-hosted environment. With a CVSS score of 8.7, this vulnerability is classified as high, indicating a substantial risk of data breach or loss of control over the local infrastructure.

Remediation Plan

Immediate Action: Administrators should immediately review the official Open WebUI vendor repository and apply all available security updates.

Proactive Monitoring: Security teams should monitor server access logs for unusual patterns, particularly unauthorized API requests or unexpected administrative activity.

Compensating Controls: Deploying a Web Application Firewall (WAF) with strict ingress filtering can provide a temporary layer of protection while patches are being tested and deployed.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 24, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the high CVSS score, this vulnerability represents a significant risk to the security of your AI infrastructure. It is critical that administrators prioritize the installation of security updates as soon as they become available to mitigate the risk of unauthorized system access.

Description Summary:
A security flaw in the Open WebUI platform could allow an attacker to exploit input handling mechanisms, potentially leading to unauthorized operations.

Executive Summary:
Open WebUI, a self-hosted AI platform, contains a high-severity vulnerability that could allow attackers to perform unauthorized actions within the system.

Vulnerability Details

CVE-ID: CVE-2026-54010

Affected Software: Open WebUI Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability stems from improper input validation within the platform, which may allow an authenticated user to manipulate system functions or bypass security controls.

Business Impact

The CVSS score of 8.3 reflects a high-severity risk that could lead to the compromise of the AI platform's data or unauthorized manipulation of its operational workflows. Organizations relying on Open WebUI for sensitive data processing face potential data integrity issues and unauthorized access to proprietary AI models if this flaw is exploited.

Remediation Plan

Immediate Action: Update the Open WebUI instance to the latest available version provided by the vendor to resolve the identified security weakness.

Proactive Monitoring: Audit application logs for unusual API calls or attempts to access restricted configuration settings.

Compensating Controls: Restrict access to the Open WebUI interface to trusted internal networks and utilize WAF rules to filter suspicious input patterns.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 24, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security teams should immediately assess their exposure to this vulnerability by checking their Open WebUI version. Promptly applying the vendor-supplied patch is essential to maintaining the security and confidentiality of the AI environment and preventing potential unauthorized access.

Description Summary:
A high-severity vulnerability in the Open WebUI platform could allow unauthorized actors to compromise the security and integrity of the self-hosted AI service.

Executive Summary:
Open WebUI users are urged to address a high-severity security vulnerability that threatens the confidentiality and integrity of their self-hosted AI platform.

Vulnerability Details

CVE-ID: CVE-2026-54008

Affected Software: Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability impacts the core functionality of Open WebUI and may allow for unauthorized access to internal resources or sensitive data. The flaw represents a significant security oversight that requires immediate patching to ensure the platform remains secure from unauthorized actors.

Business Impact

Successful exploitation carries a significant risk of data exposure and unauthorized system manipulation, which could lead to severe reputational and operational damage. With a CVSS score of 8.5, this vulnerability is considered a high-priority security event that requires immediate remediation efforts to prevent potential exploitation.

Remediation Plan

Immediate Action: Administrators must prioritize installing the latest security patches provided by the Open WebUI developers.

Proactive Monitoring: Security teams should review application audit logs for unauthorized configuration changes or suspicious user behavior.

Compensating Controls: Implementing robust authentication mechanisms and restricting network access to the Open WebUI dashboard can help mitigate the risk while awaiting a permanent patch.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 24, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The security of your Open WebUI implementation is at risk due to this high-severity vulnerability. We recommend treating this as a priority update and ensuring that your environment is patched immediately to maintain system integrity and protect sensitive information.

Description Summary:
Open WebUI is vulnerable to improper privilege management and race condition flaws, which may allow an unauthenticated attacker to achieve full system compromise.

Executive Summary:
A critical vulnerability in Open WebUI versions prior to 0.9.0 permits unauthorized privilege escalation and exploitation through race conditions.

Vulnerability Details

CVE-ID: CVE-2026-45675

Affected Software: Open WebUI

Affected Versions: < 0.9.0

Vulnerability: The application suffers from CWE-269 (Improper Privilege Management) and CWE-362 (Race Condition), allowing an unauthenticated attacker to manipulate system resources and escalate privileges.

Business Impact

The CVSS score of 8.1 reflects a high risk of total system compromise, including unauthorized data access and potential service disruption. Successful exploitation could lead to the total loss of confidentiality, integrity, and availability of the self-hosted AI platform and its underlying host environment.

Remediation Plan

Immediate Action: Upgrade the Open WebUI package to version 0.9.0 or later immediately.

Proactive Monitoring: Monitor system logs for unusual process concurrency or unexpected privilege changes that may indicate exploitation attempts.

Compensating Controls: Ensure the instance is restricted to trusted internal networks and utilize a WAF to filter potentially malicious traffic.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 16, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's reliance on race conditions suggests exploitation may be technically complex but highly impactful.

Analyst Recommendation

Given the severity of potential privilege escalation, administrators must prioritize updating to version 0.9.0. Failure to patch leaves the platform vulnerable to unauthenticated attackers seeking to gain full control of the application environment.

Description Summary:
A vulnerability exists in Open WebUI that may allow for unauthorized access or system impact.

Executive Summary:
Open WebUI is susceptible to a security vulnerability that could potentially expose the platform to unauthorized access or operational disruption.

Vulnerability Details

CVE-ID: CVE-2026-45672

Affected Software: Open WebUI

Affected Versions: See vendor advisory for affected versions

Vulnerability: The specific technical nature of this vulnerability is currently being addressed by the vendor; users should consult official documentation for the exact mechanism of compromise.

Business Impact

With a CVSS score of 8.8, this vulnerability poses a significant risk to the confidentiality and availability of the AI platform, potentially leading to unauthorized data access or service degradation.

Remediation Plan

Immediate Action: Apply the latest security patches provided by the vendor as soon as they become available.

Proactive Monitoring: Review application logs for any unauthorized access attempts or unusual system behavior.

Compensating Controls: Ensure the instance is behind a secure firewall and limit external access to only necessary personnel.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Administrators should monitor the vendor's security portal for upcoming patches. Once released, the update must be applied promptly to maintain the security posture of the Open WebUI platform.

Description Summary:
Open WebUI is susceptible to an authorization bypass vulnerability allowing authenticated users to manipulate user-controlled keys to access unauthorized data or functions.

Executive Summary:
An authorization bypass vulnerability in Open WebUI versions prior to 0.9.0 allows authenticated users to escalate their access privileges.

Vulnerability Details

CVE-ID: CVE-2026-45671

Affected Software: Open WebUI

Affected Versions: < 0.9.0

Vulnerability: This vulnerability (CWE-639) exists due to improper authorization checks, where an authenticated user can manipulate parameters to access resources they are not permitted to view or modify.

Business Impact

With a CVSS score of 8.0, this vulnerability poses a significant risk to data privacy and platform integrity. An attacker with low-level access could potentially bypass security controls to gain administrative-level visibility or control, resulting in the unauthorized access or modification of sensitive AI session data.

Remediation Plan

Immediate Action: Update Open WebUI to version 0.9.0 or later to resolve the authorization logic flaw.

Proactive Monitoring: Review access logs for abnormal patterns of resource requests or attempts to access administrative endpoints by standard users.

Compensating Controls: Implement strict Role-Based Access Control (RBAC) and review user permissions to minimize the blast radius of compromised accounts.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 16, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible.

Analyst Recommendation

The existence of a proof-of-concept elevates the risk profile of this vulnerability. Organizations should apply the 0.9.0 update immediately to prevent authenticated users from escalating their privileges and compromising the platform's security posture.

Description Summary:
A stored Cross-site Scripting (XSS) vulnerability in Open WebUI allows high-privileged users to inject malicious scripts into web pages, potentially affecting other users.

Executive Summary:
A stored Cross-site Scripting vulnerability in Open WebUI versions prior to 0.8.0 allows high-privileged users to execute malicious scripts in the context of other users' sessions.

Vulnerability Details

CVE-ID: CVE-2026-45665

Affected Software: Open WebUI

Affected Versions: < 0.8.0

Vulnerability: This vulnerability (CWE-79) occurs because input is not properly neutralized during web page generation, allowing an attacker with high privileges to perform XSS attacks.

Business Impact

The CVSS score of 8.1 highlights the danger of session hijacking and unauthorized actions performed on behalf of other users. By injecting malicious scripts, an attacker could steal session cookies or perform administrative tasks, leading to the full compromise of user accounts and potential data exfiltration.

Remediation Plan

Immediate Action: Update Open WebUI to version 0.8.0 or later to ensure proper sanitization of user-supplied input.

Proactive Monitoring: Monitor for anomalous script tags or unexpected content modifications within the web interface.

Compensating Controls: Utilize a Content Security Policy (CSP) to restrict the execution of unauthorized scripts within the browser.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 16, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible.

Analyst Recommendation

While this vulnerability requires high-level privileges to initiate, the potential for widespread impact on other users necessitates immediate patching. Updating to version 0.8.0 or higher is the only effective way to neutralize the XSS vector.

Description Summary:
Open WebUI contains an authorization bypass vulnerability allowing authenticated users to manipulate access keys.

Executive Summary:
An authorization bypass vulnerability in Open WebUI versions prior to 0.9.5 allows authenticated attackers to compromise sensitive data and integrity.

Vulnerability Details

CVE-ID: CVE-2026-45402

Affected Software: Open WebUI

Affected Versions: < 0.9.5

Vulnerability: This is an authorization bypass vulnerability (CWE-639) occurring within the application's access control logic. The flaw allows a low-privileged authenticated user to manipulate user-controlled keys, effectively bypassing authorization checks.

Business Impact

The vulnerability carries a CVSS score of 8.1, reflecting a high risk to confidentiality and integrity. Successful exploitation allows an attacker to bypass security controls, potentially leading to unauthorized access to sensitive AI data or modification of platform configurations, which could result in significant operational disruption and data breach.

Remediation Plan

Immediate Action: Update the Open WebUI package to version 0.9.5 or later immediately.

Proactive Monitoring: Review application access logs for unusual patterns involving key-related API calls or unauthorized privilege escalations.

Compensating Controls: Implement strict network segmentation for the self-hosted platform and ensure that access to the management interface is restricted to authorized personnel via VPN or Zero Trust controls.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 16, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The flaw is inherently dangerous due to its potential to grant unauthorized administrative capabilities.

Analyst Recommendation

Given the High severity score and the existence of a proof-of-concept, organizations running Open WebUI must prioritize patching to version 0.9.5. Failure to address this vulnerability increases the risk of unauthorized access and data manipulation by internal or compromised accounts.

Description Summary:
A security vulnerability has been identified in the Open WebUI platform, an AI interface designed for self-hosted, offline environments.

Executive Summary:
The Open WebUI platform contains a high-severity vulnerability that could facilitate unauthorized actions within the self-hosted AI environment.

Vulnerability Details

CVE-ID: CVE-2026-45401

Affected Software: Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability affects the core functionality of the Open WebUI, potentially allowing for unauthorized exploitation of the platform's features.

Business Impact

With a CVSS score of 8.5, this vulnerability represents a substantial threat to the confidentiality and availability of the affected system. Failure to mitigate this risk could expose the organization to unauthorized access, potentially leading to the loss or manipulation of internal AI model data.

Remediation Plan

Immediate Action: Closely track vendor communications regarding this CVE and apply the latest software updates as soon as they are published.

Proactive Monitoring: Monitor for unusual system activity or unexpected changes to the configuration of the Open WebUI instance.

Compensating Controls: Restrict access to the management interface to trusted internal IP ranges only to reduce the risk of remote exploitation.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this issue warrants a proactive approach to security. Administrators are advised to maintain a strict patching cadence and verify the integrity of their Open WebUI installations to ensure security controls remain effective.

Description Summary:
A security vulnerability has been identified in the Open WebUI platform, an AI interface designed for self-hosted, offline environments.

Executive Summary:
The Open WebUI platform is affected by a high-severity vulnerability, posing a significant risk to the security of self-hosted artificial intelligence infrastructure.

Vulnerability Details

CVE-ID: CVE-2026-45400

Affected Software: Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability represents a potential security weakness within the Open WebUI application logic, necessitating prompt investigation by administrators to determine the specific impact on their deployment.

Business Impact

A CVSS score of 8.5 indicates a high probability of successful exploitation if left unaddressed, potentially resulting in unauthorized access to AI-driven workflows. Organizations relying on Open WebUI for sensitive data processing face potential data leakage if this flaw is weaponized against the host environment.

Remediation Plan

Immediate Action: Monitor the Open WebUI official channels for patch release notifications and apply updates immediately upon availability.

Proactive Monitoring: Enable verbose logging on the application server to capture and analyze suspicious traffic patterns or unauthorized API calls.

Compensating Controls: Deploy a Web Application Firewall (WAF) with custom rules to filter suspicious requests intended for the Open WebUI service.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability demands immediate attention due to the high-severity classification. Security teams should ensure that the platform is not exposed to untrusted networks and prepare to patch systems immediately upon the release of vendor security fixes.

Description Summary:
A security vulnerability has been identified in the Open WebUI platform that may expose the system to unauthorized access or manipulation.

Executive Summary:
The Open WebUI platform is vulnerable to a high-severity security flaw that could potentially compromise the integrity and confidentiality of the self-hosted AI environment.

Vulnerability Details

CVE-ID: CVE-2026-45399

Affected Software: Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability relates to the Open WebUI platform; however, specific technical details regarding the entry point and authentication requirements remain pending further vendor disclosure. Users should treat this as a potentially exploitable flaw requiring immediate attention to prevent unauthorized system interaction.

Business Impact

A successful exploit of this vulnerability could lead to unauthorized access to sensitive AI models, configuration data, or internal system resources. Given the CVSS score of 7.1, this is classified as a High-severity risk that could result in significant operational disruption or data exfiltration if left unaddressed.

Remediation Plan

Immediate Action: Review the official Open WebUI security advisory to identify and apply the latest security patches or configuration updates.

Proactive Monitoring: Monitor system and application access logs for unusual patterns, unauthorized login attempts, or anomalous administrative activity.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rule sets to filter suspicious traffic directed at the Open WebUI instance until a patch is applied.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 17, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations utilizing Open WebUI must prioritize the monitoring of vendor channels for official remediation guidance. Given the high-severity classification, administrators should prepare for an emergency patch cycle to mitigate potential unauthorized access to the AI platform.

Description Summary:
Open WebUI, a self-hosted artificial intelligence platform, is affected by a high-severity security vulnerability requiring immediate attention.

Executive Summary:
A high-severity security flaw in the Open WebUI platform demands immediate attention to prevent potential unauthorized access or service disruption.

Vulnerability Details

CVE-ID: CVE-2026-45398

Affected Software: Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This is a high-severity vulnerability within the Open WebUI platform; detailed technical specifics are currently pending full disclosure in the official vendor advisory.

Business Impact

With a CVSS score of 7.5, this vulnerability could allow attackers to bypass security controls or gain unauthorized access to the application. This poses a risk to the confidentiality and availability of the AI services hosted within the environment.

Remediation Plan

Immediate Action: Apply all security patches released by the vendor for Open WebUI as soon as they become available.

Proactive Monitoring: Monitor application performance and access logs for any signs of unauthorized activity or unusual behavior.

Compensating Controls: Use a Web Application Firewall (WAF) to filter suspicious traffic and block potential exploitation attempts targeting the platform.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of May 17, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security teams should treat this high-severity vulnerability with urgency. Ensure that the Open WebUI environment is fully updated and that monitoring mechanisms are in place to detect and respond to any signs of compromise.

Description Summary:
A high-severity vulnerability has been identified in the Open WebUI AI platform, requiring immediate attention from security administrators.

Executive Summary:
A high-severity security vulnerability in Open WebUI poses a risk to platform security, requiring immediate remediation efforts.

Vulnerability Details

CVE-ID: CVE-2026-45395

Affected Software: Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This is a high-severity security flaw in the Open WebUI platform; administrators are encouraged to follow vendor guidance for specific remediation steps.

Business Impact

With a CVSS score of 7.2, this vulnerability could potentially lead to unauthorized access or security bypasses within the Open WebUI environment. This presents a risk to the confidentiality and integrity of hosted AI data.

Remediation Plan

Immediate Action: Apply vendor security updates as soon as they become available for the Open WebUI platform.

Proactive Monitoring: Monitor system logs for signs of unauthorized access or exploitation attempts targeting the platform.

Compensating Controls: Restrict access to the platform to authorized internal networks only to minimize the risk of external exploitation.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of May 17, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security teams must prioritize the update of the Open WebUI platform to the latest version. Given the high-severity rating, maintaining a secure and patched configuration is critical to preventing unauthorized access.

Description Summary:
A security vulnerability has been identified in the Open WebUI platform that may expose the system to unauthorized access or manipulation.

Executive Summary:
The Open WebUI platform is vulnerable to a high-severity security flaw that could potentially compromise the integrity and confidentiality of the self-hosted AI environment.

Vulnerability Details

CVE-ID: CVE-2026-45350

Affected Software: Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability relates to the Open WebUI platform; however, specific technical details regarding the entry point and authentication requirements remain pending further vendor disclosure. Users should treat this as a potentially exploitable flaw requiring immediate attention to prevent unauthorized system interaction.

Business Impact

A successful exploit of this vulnerability could lead to unauthorized access to sensitive AI models, configuration data, or internal system resources. Given the CVSS score of 7.1, this is classified as a High-severity risk that could result in significant operational disruption or data exfiltration if left unaddressed.

Remediation Plan

Immediate Action: Review the official Open WebUI security advisory to identify and apply the latest security patches or configuration updates.

Proactive Monitoring: Monitor system and application access logs for unusual patterns, unauthorized login attempts, or anomalous administrative activity.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rule sets to filter suspicious traffic directed at the Open WebUI instance until a patch is applied.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 17, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations utilizing Open WebUI must prioritize the monitoring of vendor channels for official remediation guidance. Given the high-severity classification, administrators should prepare for an emergency patch cycle to mitigate potential unauthorized access to the AI platform.

Description Summary:
A security vulnerability has been identified in the Open WebUI platform that may expose the system to unauthorized access or manipulation.

Executive Summary:
The Open WebUI platform is vulnerable to a high-severity security flaw that could potentially compromise the integrity and confidentiality of the self-hosted AI environment.

Vulnerability Details

CVE-ID: CVE-2026-45349

Affected Software: Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability relates to the Open WebUI platform; however, specific technical details regarding the entry point and authentication requirements remain pending further vendor disclosure. Users should treat this as a potentially exploitable flaw requiring immediate attention to prevent unauthorized system interaction.

Business Impact

A successful exploit of this vulnerability could lead to unauthorized access to sensitive AI models, configuration data, or internal system resources. Given the CVSS score of 7.1, this is classified as a High-severity risk that could result in significant operational disruption or data exfiltration if left unaddressed.

Remediation Plan

Immediate Action: Review the official Open WebUI security advisory to identify and apply the latest security patches or configuration updates.

Proactive Monitoring: Monitor system and application access logs for unusual patterns, unauthorized login attempts, or anomalous administrative activity.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rule sets to filter suspicious traffic directed at the Open WebUI instance until a patch is applied.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 17, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations utilizing Open WebUI must prioritize the monitoring of vendor channels for official remediation guidance. Given the high-severity classification, administrators should prepare for an emergency patch cycle to mitigate potential unauthorized access to the AI platform.

Description Summary:
Open WebUI is susceptible to Server-Side Request Forgery (SSRF) due to improper validation of user-supplied URLs.

Executive Summary:
An SSRF vulnerability in Open WebUI versions prior to 0.9.0 allows authenticated attackers to perform unauthorized requests to internal resources, posing a critical security risk.

Vulnerability Details

CVE-ID: CVE-2026-45338

Affected Software: Open WebUI

Affected Versions: < 0.9.0

Vulnerability: This vulnerability (CWE-918) allows an authenticated attacker to perform Server-Side Request Forgery by manipulating requests to the application. The application fails to properly validate the target host, allowing the attacker to interact with internal services that are not reachable from the public internet.

Business Impact

The CVSS score of 7.7 indicates a high risk. Successful SSRF exploitation can allow an attacker to bypass firewalls, conduct internal reconnaissance, or interact with sensitive internal APIs and metadata services, potentially leading to further compromise of the internal network architecture.

Remediation Plan

Immediate Action: Update the Open WebUI application to version 0.9.0 or later to ensure the fix for SSRF is implemented.

Proactive Monitoring: Monitor egress traffic from the server hosting Open WebUI for connections to unauthorized internal IP addresses or services.

Compensating Controls: Implement an egress filtering policy (e.g., via a firewall) that limits the server's ability to communicate with internal network segments that are not required for its operation.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 16, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. SSRF vulnerabilities in AI platforms are particularly dangerous as they can often be used to exfiltrate internal configuration data.

Analyst Recommendation

The severity of this SSRF vulnerability requires immediate patching. Administrators should verify that their Open WebUI instances are not exposed to untrusted networks and that egress traffic is restricted to minimize the potential impact of similar vulnerabilities.

Description Summary:
A security vulnerability has been identified in the Open WebUI platform, an AI interface designed for self-hosted, offline environments.

Executive Summary:
The Open WebUI platform contains a high-severity vulnerability that could allow unauthorized actors to compromise the integrity and confidentiality of self-hosted AI services.

Vulnerability Details

CVE-ID: CVE-2026-45331

Affected Software: Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The specific nature of the vulnerability is currently undergoing technical validation. Until further details are disclosed by the vendor, it is treated as a high-risk flaw requiring authenticated or unauthenticated access depending on deployment configuration.

Business Impact

Successful exploitation of this vulnerability carries significant risk to organizational AI assets, potentially leading to unauthorized data access or service disruption. With a CVSS score of 8.5, this high-severity rating necessitates immediate attention to prevent the compromise of local AI models and sensitive training data.

Remediation Plan

Immediate Action: Consult the official Open WebUI repository and vendor security advisories to identify and apply the latest security patches.

Proactive Monitoring: Review system and application access logs for anomalous behavior, particularly requests targeting the AI interface or backend API endpoints.

Compensating Controls: Implement strict network segmentation and restrict access to the WebUI interface behind a VPN or authenticated proxy to mitigate exposure.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the high CVSS score, administrators must prioritize this issue. Ensure that all instances of Open WebUI are isolated from public exposure and apply all vendor-supplied updates as soon as they become available to minimize the attack surface.

Description Summary:
A vulnerability exists in Open WebUI that may allow for unauthorized access or system impact.

Executive Summary:
Open WebUI is affected by a security vulnerability that could potentially allow for unauthorized access or compromise of the system.

Vulnerability Details

CVE-ID: CVE-2026-45315

Affected Software: Open WebUI

Affected Versions: See vendor advisory for affected versions

Vulnerability: The specific technical nature of this vulnerability is currently being addressed by the vendor; users should consult official documentation for the exact mechanism of compromise.

Business Impact

With a CVSS score of 8.7, this vulnerability presents a high-severity risk to organizational security, potentially enabling unauthorized access to AI models or sensitive user data.

Remediation Plan

Immediate Action: Apply the latest security patches provided by the vendor as soon as they become available.

Proactive Monitoring: Monitor for anomalous traffic and ensure that all access to the platform is authenticated and logged.

Compensating Controls: Utilize network-level security measures to isolate the platform until the appropriate patches are applied.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations should prioritize monitoring the vendor's security updates. Once the patch is available, it must be deployed immediately to ensure the continued security of the Open WebUI environment.

Description Summary:
A Cross-site Scripting (XSS) vulnerability in the Open WebUI platform allows attackers to execute arbitrary scripts in the context of an authenticated user's browser session.

Executive Summary:
A critical XSS vulnerability in Open WebUI could allow an attacker to hijack user sessions or perform unauthorized actions within the AI interface.

Vulnerability Details

CVE-ID: CVE-2026-45303

Affected Software: Open WebUI

Affected Versions: < 0.6.5

Vulnerability: This is a Cross-site Scripting (CWE-79) vulnerability occurring during web page generation. An attacker with low-level privileges can inject malicious scripts that execute in the browser of a victim, potentially leading to total technical impact.

Business Impact

Successful exploitation allows for the theft of session tokens, unauthorized access to sensitive AI chat history, or the performance of actions on behalf of the user. With a CVSS score of 7.7, the risk of data compromise and unauthorized platform activity is high, particularly in collaborative or multi-user environments.

Remediation Plan

Immediate Action: Update the Open WebUI package to version 0.6.5 or later immediately.

Proactive Monitoring: Audit logs for suspicious script injections or unusual user behavior originating from within the platform's interface.

Compensating Controls: Utilize a Content Security Policy (CSP) to restrict the execution of unauthorized scripts and employ a WAF to filter malicious inputs.

Exploitation Status

Public Exploit Available: No (unknown)

Analyst Notes: As of 2026-07-11, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible.

Analyst Recommendation

Security teams must prioritize the update to version 0.6.5. This vulnerability poses a significant risk to user data privacy and session integrity; failure to patch leaves the platform exposed to potential account takeover and information disclosure.

Description Summary:
Open WebUI contains an improper access control vulnerability that allows authenticated users to perform unauthorized actions.

Executive Summary:
An improper access control vulnerability in Open WebUI versions prior to 0.3.16 permits authenticated attackers to bypass security restrictions and compromise system integrity.

Vulnerability Details

CVE-ID: CVE-2026-45301

Affected Software: Open WebUI

Affected Versions: < 0.3.16

Vulnerability: This vulnerability, classified under CWE-284, stems from improper access control. The CVSS vector (PR:L) confirms that an attacker must possess authenticated, low-privileged access to the platform to exploit this flaw.

Business Impact

The vulnerability carries a CVSS score of 8.1, indicating a high severity risk. Successful exploitation allows an authenticated attacker to manipulate data or gain unauthorized access to functions they should not be able to access, potentially leading to a total loss of confidentiality and integrity within the platform. Given the nature of AI platforms, this could result in unauthorized access to sensitive model interactions or administrative configurations.

Remediation Plan

Immediate Action: Update the Open WebUI platform to version 0.3.16 or later immediately.

Proactive Monitoring: Review application access logs for unusual patterns of API calls or unauthorized attempts to access administrative endpoints.

Compensating Controls: Ensure the deployment is restricted to trusted internal networks and utilize a Web Application Firewall (WAF) to filter malicious requests targeting the application's authentication logic.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of May 18, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The requirement for low-level authentication slightly mitigates the attack surface but does not remove the risk of insider threats or compromised user accounts.

Analyst Recommendation

Organizations utilizing Open WebUI must prioritize upgrading to version 0.3.16 to remediate this access control flaw. Given the existence of a proof-of-concept, the window for potential exploitation is narrowing; immediate patching is the only effective method to ensure the security of the AI platform environment.

Description Summary:
A high-severity vulnerability has been identified in the Open WebUI self-hosted AI platform, requiring immediate review of vendor-provided security patches.

Executive Summary:
A high-severity security vulnerability in Open WebUI poses a risk to platform integrity, necessitating prompt investigation and remediation by security administrators.

Vulnerability Details

CVE-ID: CVE-2026-44721

Affected Software: Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The platform exhibits a high-severity security flaw; administrators should consult the vendor's security advisory to understand the specific technical vector of this issue.

Business Impact

The CVSS score of 7.3 highlights a significant risk, potentially allowing an attacker to impact the confidentiality or integrity of the AI platform. This could lead to unauthorized access to sensitive datasets or model environments.

Remediation Plan

Immediate Action: Update Open WebUI to the latest version as soon as a security patch is provided by the vendor.

Proactive Monitoring: Review access logs and audit trails for any suspicious behavior or unauthorized access attempts.

Compensating Controls: Implement robust network-level security, such as segmenting the AI platform from the broader network, to limit the blast radius of a potential exploit.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of May 17, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the high-severity rating, organizations should treat this vulnerability as a priority. Proactive patching and continuous monitoring are critical to securing the Open WebUI deployment against potential threats.

Description Summary:
A security vulnerability has been identified in the Open WebUI platform, an AI interface designed for self-hosted, offline environments.

Executive Summary:
The Open WebUI platform is subject to a high-severity vulnerability that requires immediate administrative oversight to mitigate potential security risks.

Vulnerability Details

CVE-ID: CVE-2026-44570

Affected Software: Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The flaw involves a critical security gap in the Open WebUI software, which may allow attackers to exploit system functions if not properly secured.

Business Impact

The CVSS score of 8.3 indicates that this vulnerability poses a significant risk to organizational infrastructure. If successfully exploited, it could lead to unauthorized system access, potentially compromising the integrity of all data processed by the self-hosted AI platform.

Remediation Plan

Immediate Action: Prioritize the installation of security updates provided by the vendor as they become available to address this specific vulnerability.

Proactive Monitoring: Regularly audit access logs for signs of unauthorized authentication attempts or unexpected API behavior.

Compensating Controls: Use network-level access controls, such as firewalls or VPNs, to isolate the Open WebUI server from any public-facing or untrusted network segments.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the high-severity rating, immediate remediation is strongly recommended. Security teams should implement the necessary patches as soon as possible and review existing access controls to ensure the platform is appropriately hardened against potential threats.

Description Summary:
A security vulnerability has been identified in the Open WebUI platform that may expose the system to unauthorized access or manipulation.

Executive Summary:
The Open WebUI platform is vulnerable to a high-severity security flaw that could potentially compromise the integrity and confidentiality of the self-hosted AI environment.

Vulnerability Details

CVE-ID: CVE-2026-44569

Affected Software: Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability relates to the Open WebUI platform; however, specific technical details regarding the entry point and authentication requirements remain pending further vendor disclosure. Users should treat this as a potentially exploitable flaw requiring immediate attention to prevent unauthorized system interaction.

Business Impact

A successful exploit of this vulnerability could lead to unauthorized access to sensitive AI models, configuration data, or internal system resources. Given the CVSS score of 7.1, this is classified as a High-severity risk that could result in significant operational disruption or data exfiltration if left unaddressed.

Remediation Plan

Immediate Action: Review the official Open WebUI security advisory to identify and apply the latest security patches or configuration updates.

Proactive Monitoring: Monitor system and application access logs for unusual patterns, unauthorized login attempts, or anomalous administrative activity.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rule sets to filter suspicious traffic directed at the Open WebUI instance until a patch is applied.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 17, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations utilizing Open WebUI must prioritize the monitoring of vendor channels for official remediation guidance. Given the high-severity classification, administrators should prepare for an emergency patch cycle to mitigate potential unauthorized access to the AI platform.

Description Summary:
Open WebUI, a self-hosted AI platform, is subject to a high-severity vulnerability requiring immediate security review and remediation.

Executive Summary:
A high-severity vulnerability in the Open WebUI platform necessitates immediate security actions to prevent potential exploitation.

Vulnerability Details

CVE-ID: CVE-2026-44567

Affected Software: Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This high-severity vulnerability affects the Open WebUI platform; technical specifics will be detailed in forthcoming vendor security advisories.

Business Impact

A CVSS score of 7.3 indicates a potential for significant impact on the security posture of the affected organization. Exploitation could lead to unauthorized system access or the compromise of sensitive AI-related data.

Remediation Plan

Immediate Action: Update Open WebUI to the latest version immediately once the vendor releases a security patch.

Proactive Monitoring: Review audit logs for unusual authentication or administrative activity within the platform.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated signatures to detect and block potential exploit payloads.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of May 17, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Prompt remediation is necessary to mitigate the risks posed by this high-severity vulnerability. Security teams must ensure their Open WebUI installations are kept up-to-date and monitored for any suspicious behavior.

Description Summary:
A high-severity vulnerability has been reported in the Open WebUI self-hosted AI platform, requiring prompt security remediation.

Executive Summary:
A high-severity security vulnerability in Open WebUI requires immediate attention to protect the platform from unauthorized exploitation.

Vulnerability Details

CVE-ID: CVE-2026-44566

Affected Software: Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This is a high-severity security vulnerability identified within the Open WebUI platform; administrators should consult the vendor for specific patch instructions.

Business Impact

With a CVSS score of 7.3, this vulnerability represents a significant risk to the security of the AI platform. Exploitation could allow attackers to bypass standard security controls, potentially leading to unauthorized system manipulation or data compromise.

Remediation Plan

Immediate Action: Apply security updates for Open WebUI immediately upon their release by the vendor.

Proactive Monitoring: Monitor for anomalous traffic patterns directed at the Open WebUI service to identify potential exploitation attempts.

Compensating Controls: Implement strict firewall rules and limit service exposure to the public internet to reduce the attack surface.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of May 17, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations should not delay in applying security updates to the Open WebUI platform. Given the high-severity classification, maintaining a patched and secure environment is essential to mitigating the associated risks.

Description Summary:
Open WebUI is affected by a path traversal vulnerability that allows authenticated users to access or manipulate restricted files on the host system.

Executive Summary:
A path traversal vulnerability in Open WebUI versions prior to 0.6.10 allows authenticated attackers to access sensitive files on the underlying host system, posing a critical security risk.

Vulnerability Details

CVE-ID: CVE-2026-44565

Affected Software: Open WebUI

Affected Versions: < 0.6.10

Vulnerability: This is a path traversal vulnerability (CWE-22) where input is not sufficiently sanitized, allowing an attacker to navigate outside the intended directory. The CVSS vector (PR:L) confirms that an authenticated user can leverage this to impact system integrity and availability.

Business Impact

The CVSS score of 8.1 reflects the danger of allowing unauthorized file access. An attacker could potentially read sensitive configuration files, environment variables, or other critical system data, leading to a full compromise of the application server. This constitutes a severe threat to operational security and data privacy.

Remediation Plan

Immediate Action: Patch the Open WebUI installation by upgrading to version 0.6.10 or later.

Proactive Monitoring: Monitor server-side file access logs for directory traversal patterns (e.g., ../ strings) associated with application user accounts.

Compensating Controls: Ensure the application is running with the least-privilege principle, ideally within a containerized environment with a read-only root filesystem to limit the impact of potential directory traversal.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of May 18, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. Path traversal vulnerabilities are a common vector for escalating access to the underlying host, making this a high-priority issue.

Analyst Recommendation

The severity of path traversal vulnerabilities requires immediate attention to prevent unauthorized file access. Organizations must update their Open WebUI instances to version 0.6.10 without delay, as the existence of a proof-of-concept elevates the likelihood of exploitation by malicious actors.

Description Summary:
A security vulnerability has been identified in the Open WebUI platform that may expose the system to unauthorized access or manipulation.

Executive Summary:
The Open WebUI platform is vulnerable to a high-severity security flaw that could potentially compromise the integrity and confidentiality of the self-hosted AI environment.

Vulnerability Details

CVE-ID: CVE-2026-44556

Affected Software: Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability relates to the Open WebUI platform; however, specific technical details regarding the entry point and authentication requirements remain pending further vendor disclosure. Users should treat this as a potentially exploitable flaw requiring immediate attention to prevent unauthorized system interaction.

Business Impact

A successful exploit of this vulnerability could lead to unauthorized access to sensitive AI models, configuration data, or internal system resources. Given the CVSS score of 7.1, this is classified as a High-severity risk that could result in significant operational disruption or data exfiltration if left unaddressed.

Remediation Plan

Immediate Action: Review the official Open WebUI security advisory to identify and apply the latest security patches or configuration updates.

Proactive Monitoring: Monitor system and application access logs for unusual patterns, unauthorized login attempts, or anomalous administrative activity.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rule sets to filter suspicious traffic directed at the Open WebUI instance until a patch is applied.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 17, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations utilizing Open WebUI must prioritize the monitoring of vendor channels for official remediation guidance. Given the high-severity classification, administrators should prepare for an emergency patch cycle to mitigate potential unauthorized access to the AI platform.

Description Summary:
Open WebUI is a self-hosted AI platform; information regarding this vulnerability is currently limited, requiring users to consult vendor advisories.

Executive Summary:
A high-severity vulnerability has been identified in the Open WebUI platform, necessitating immediate review of vendor security updates to mitigate potential risks.

Vulnerability Details

CVE-ID: CVE-2026-44555

Affected Software: Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The specific nature of this vulnerability is currently under investigation; however, it is classified as a high-risk security issue requiring prompt remediation.

Business Impact

The CVSS score of 7.6 indicates a significant security risk, which could lead to unauthorized access or information disclosure if exploited. As an AI platform, compromise could result in the leakage of sensitive training data or proprietary model configurations.

Remediation Plan

Immediate Action: Apply vendor-provided security updates or patches immediately upon availability.

Proactive Monitoring: Review system logs for anomalous access patterns or unauthorized configuration changes within the Open WebUI environment.

Compensating Controls: Restrict access to the Open WebUI interface by placing it behind a VPN or internal network with strict access control lists (ACLs).

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of May 17, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations hosting the Open WebUI platform should monitor official vendor channels for specific patch details. Given the high-severity classification, prioritizing the application of security updates is essential to maintaining the integrity of the AI infrastructure.

Description Summary:
Open WebUI suffers from a missing authorization vulnerability, allowing authenticated users to perform unauthorized actions due to improper capability checks.

Executive Summary:
A missing authorization vulnerability in Open WebUI allows authenticated attackers to perform unauthorized actions, potentially leading to significant integrity and availability impacts.

Vulnerability Details

CVE-ID: CVE-2026-44554

Affected Software: Open WebUI

Affected Versions: < 0.9.0

Vulnerability: This is a CWE-862 (Missing Authorization) vulnerability where the application fails to verify if a user has the necessary permissions to execute specific functions. The CVSS vector indicates that while the attack requires low privileges (authenticated), it can be performed remotely by a malicious actor.

Business Impact

The vulnerability poses a significant risk to the integrity and availability of the AI platform. A successful exploit could allow an unauthorized user to manipulate system configurations or disrupt services, potentially leading to data manipulation or system downtime. The CVSS score of 8.1 reflects the high impact on integrity and availability, necessitating prompt remediation.

Remediation Plan

Immediate Action: Update the Open WebUI package to version 0.9.0 or later immediately.

Proactive Monitoring: Monitor system access logs for unusual administrative activity or requests to sensitive API endpoints by standard user accounts.

Compensating Controls: Implement strict network access controls to restrict access to the WebUI interface to trusted internal segments only.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of May 16, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently exploitable by any authenticated user who can reach the affected API endpoints.

Analyst Recommendation

Given the CVSS score of 8.1 and the ease of exploitation for authenticated users, organizations should prioritize updating their Open WebUI instances to version 0.9.0 without delay. Failure to patch may expose the platform to unauthorized configuration changes or service disruption.

Description Summary:
A security vulnerability has been identified in the Open WebUI platform, an AI interface designed for self-hosted, offline environments.

Executive Summary:
A high-severity vulnerability in the Open WebUI platform exposes self-hosted AI services to potential security compromises.

Vulnerability Details

CVE-ID: CVE-2026-44553

Affected Software: Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability affects the security posture of the Open WebUI platform, potentially allowing for unauthorized exploitation of its internal components.

Business Impact

With a CVSS score of 8.1, this vulnerability presents a serious threat to the security of the host environment. Organizations should treat this as a high-priority issue to prevent unauthorized access and potential data exfiltration from the AI platform.

Remediation Plan

Immediate Action: Actively monitor for and apply the latest security updates released by the vendor to remediate this vulnerability.

Proactive Monitoring: Maintain detailed logs of application access and monitor for unusual, high-frequency requests that may indicate an exploit attempt.

Compensating Controls: Ensure that the Open WebUI instance is running behind a secure gateway or proxy that can provide an additional layer of authentication and traffic inspection.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The vulnerability poses a clear risk to the integrity of the Open WebUI platform. Administrators must act promptly to apply patches and ensure that security configurations are robust enough to defend against potential exploitation attempts.

Description Summary:
A vulnerability exists in Open WebUI that may allow for unauthorized access or system impact.

Executive Summary:
Open WebUI contains a security vulnerability that could potentially lead to unauthorized access or compromise of the platform.

Vulnerability Details

CVE-ID: CVE-2026-44552

Affected Software: Open WebUI

Affected Versions: See vendor advisory for affected versions

Vulnerability: The specific technical nature of this vulnerability is currently being addressed by the vendor; users should consult official documentation for the exact mechanism of compromise.

Business Impact

The CVSS score of 8.7 indicates a high-severity risk that could lead to significant unauthorized access or disruption of services, necessitating prompt attention from security teams.

Remediation Plan

Immediate Action: Apply the latest security patches provided by the vendor as soon as they become available.

Proactive Monitoring: Audit access logs for suspicious activity or patterns that deviate from normal user behavior.

Compensating Controls: Implement strict network access controls to minimize the attack surface of the Open WebUI instance.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security teams should stay vigilant and apply the vendor-provided patches as soon as they are published to mitigate the risk associated with this vulnerability.

Description Summary:
The LDAP authentication endpoint in Open WebUI fails to validate non-empty passwords, allowing unauthenticated attackers to bypass authentication and obtain session tokens.

Executive Summary:
An authentication bypass vulnerability in Open WebUI allows unauthenticated attackers to gain unauthorized access to the platform via empty LDAP password submissions.

Vulnerability Details

CVE-ID: CVE-2026-44551

Affected Software: Open WebUI

Affected Versions: Prior to 0.9.0

Vulnerability: This is an authentication bypass vulnerability occurring in the LDAP bind process; the application fails to enforce a minimum length constraint on the password field, permitting an unauthenticated attacker to successfully bind as an arbitrary user.

Business Impact

Successful exploitation leads to full account takeover, granting attackers unauthorized access to sensitive AI data and administrative functions. With a CVSS score of 9.1, this represents a critical risk to data confidentiality and integrity.

Remediation Plan

Immediate Action: Upgrade the Open WebUI instance to version 0.9.0 or later to ensure proper LDAP password validation.

Proactive Monitoring: Review LDAP authentication logs for patterns of unusual bind requests or successful logins with anomalous user-agent strings.

Compensating Controls: Implement network-level restrictions to limit access to the login interface to trusted IP ranges until the patch can be applied.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 15, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical severity of this authentication bypass, administrators must prioritize the update to version 0.9.0 immediately. Failure to patch leaves the platform vulnerable to trivial account takeover by unauthenticated remote actors.

Description Summary:
Open WebUI, a self-hosted AI platform, contains a high-severity vulnerability that requires immediate remediation through vendor-issued security updates.

Executive Summary:
A high-severity security vulnerability in the Open WebUI platform could allow unauthorized access, requiring immediate attention to secure the environment.

Vulnerability Details

CVE-ID: CVE-2026-44549

Affected Software: Open WebUI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This high-severity vulnerability affects the Open WebUI platform, with technical details currently subject to vendor disclosure and patch availability.

Business Impact

A CVSS score of 7.3 indicates that successful exploitation could result in significant security breaches, including unauthorized access to internal AI tools or sensitive information. This poses a threat to both operational continuity and data security.

Remediation Plan

Immediate Action: Monitor vendor security advisories and apply the latest patches for Open WebUI immediately upon release.

Proactive Monitoring: Regularly audit user access and system configurations to detect any signs of exploitation.

Compensating Controls: Use network access controls to restrict connections to the Open WebUI server to known, trusted IP addresses only.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of May 17, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security teams must prioritize the remediation of this vulnerability. Ensure all instances of Open WebUI are accounted for and updated promptly once the vendor provides the necessary security patches.

Description Summary:
Open WebUI prior to version 0.8.11 contains a broken access control vulnerability in tool values that allows unauthorized access.

Executive Summary:
A broken access control vulnerability in Open WebUI versions prior to 0.8.11 poses a significant risk of unauthorized data exposure.

Vulnerability Details

CVE-ID: CVE-2026-34222

Affected Software: Open WebUI

Affected Versions: < 0.8.11

Vulnerability: This vulnerability involves an improper authorization flaw (CWE-285) within the tool values functionality. The vulnerability requires the attacker to have low-level privileges (authenticated user) to exploit the access control weakness.

Business Impact

The flaw allows an authenticated user to access information that should be restricted, potentially leading to unauthorized data disclosure. Given the CVSS score of 7.7, this is classified as a High-severity issue that could compromise the confidentiality of sensitive AI-driven workflows and proprietary data.

Remediation Plan

Immediate Action: Update the Open WebUI installation to version 0.8.11 or later to resolve the underlying authorization defect.

Proactive Monitoring: Review application access logs for unusual patterns or attempts by standard users to access administrative or restricted tool configuration endpoints.

Compensating Controls: Implement strict network-level access controls to limit exposure of the Open WebUI interface to trusted internal networks only, reducing the attack surface.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of April 3, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The nature of this flaw suggests that any authenticated user could potentially bypass intended access restrictions to read sensitive tool-related data.

Analyst Recommendation

Organizations utilizing Open WebUI must prioritize upgrading to version 0.8.11 immediately. Because this vulnerability involves broken access controls, standard authentication measures are insufficient to stop an attacker who has already gained low-level access to the platform. Applying the vendor-supplied patch is the only definitive way to secure the system against this risk.

Description Summary:
Open WebUI prior to 0.6.44 is vulnerable to stored Cross-site Scripting (XSS) via manipulated chat history, allowing malicious payloads to be shared with other users on the instance.

Executive Summary:
A stored Cross-site Scripting vulnerability in Open WebUI versions prior to 0.6.44 permits authenticated attackers to execute arbitrary scripts in the context of other users, including through shared links.

Vulnerability Details

CVE-ID: CVE-2026-26193

Affected Software: Open WebUI

Affected Versions: < 0.6.44

Vulnerability: This vulnerability occurs because the application fails to properly sanitize the embeds property of response messages, leading to a Cross-site Scripting (CWE-79) flaw. An authenticated user can inject malicious scripts that execute within an iFrame due to insecure sandbox configurations, allowing the payload to persist in chat history and propagate to other users via shared chat links.

Business Impact

The exploitation of this vulnerability can lead to unauthorized access to user sessions, data theft, and the potential compromise of sensitive AI-driven interactions within the organization. Given the CVSS score of 7.3, this flaw presents a significant risk to the integrity and confidentiality of the platform, as an attacker could impersonate legitimate users or exfiltrate private chat data across the instance.

Remediation Plan

Immediate Action: Update the Open WebUI platform to version 0.6.44 or later to resolve the improper iframe sandbox configuration.

Proactive Monitoring: Review audit logs for unusual chat activity or the creation of suspicious shared links that may contain embedded scripts.

Compensating Controls: Implement a strict Content Security Policy (CSP) to restrict script execution and limit the domains from which iFrame content can be loaded.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of February 21, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its ability to spread malicious payloads through shared links, which facilitates lateral movement within an instance.

Analyst Recommendation

The risk associated with this XSS vulnerability is elevated by its ability to affect multiple users through shared chat functionality. Administrators should prioritize the update to version 0.6.44 immediately to ensure the iframe sandbox is correctly configured and to prevent potential script injection attacks.

Description Summary:
Open WebUI prior to version 0.7.0 is vulnerable to stored Cross-site Scripting (XSS) because it improperly handles HTML content within document metadata during chat citation previews.

Executive Summary:
An authenticated user can execute arbitrary code in the browser of other users by injecting a weaponized document payload into a chat, leading to stored Cross-site Scripting.

Vulnerability Details

CVE-ID: CVE-2026-26192

Affected Software: Open WebUI

Affected Versions: < 0.7.0

Vulnerability: The application fails to neutralize input within the document metadata html property, allowing an authenticated attacker to craft malicious payloads that execute when a citation is previewed or a chat is shared.

Business Impact

The vulnerability carries a CVSS score of 7.3, reflecting its potential for significant impact on user session integrity and data confidentiality. Successful exploitation allows an attacker to perform actions on behalf of other users, potentially leading to the theft of session tokens, unauthorized access to sensitive chat history, or the redirection of users to malicious content.

Remediation Plan

Immediate Action: Upgrade the Open WebUI platform to version 0.7.0 or later to apply the necessary input sanitization fixes.

Proactive Monitoring: Review web access logs for unusual document uploads or suspicious requests targeting the citation preview endpoint.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common XSS patterns in file uploads and metadata fields.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of February 21, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently exploitable by any authenticated user with the ability to upload or modify documents within the platform.

Analyst Recommendation

Given the potential for unauthorized code execution and session compromise, administrators should prioritize updating to version 0.7.0 immediately. Organizations utilizing Open WebUI in multi-user environments face heightened risk, as the vulnerability affects both individual chat sessions and shared chat interactions.

Description Summary:
A stored cross-site scripting vulnerability in Open WebUI allows attackers to execute arbitrary JavaScript and steal session tokens via malicious SVG tags in imported Markdown files.

Executive Summary:
Open WebUI versions prior to 0.6.37 are vulnerable to stored cross-site scripting, which can lead to session hijacking and unauthorized account access for both administrators and regular users.

Vulnerability Details

CVE-ID: CVE-2025-65959

Affected Software: Open WebUI

Affected Versions: < 0.6.37

Vulnerability: This is a stored cross-site scripting (CWE-79) vulnerability within the Notes PDF download functionality. It allows an authenticated or unauthenticated attacker to inject malicious SVG tags into Markdown files, which execute arbitrary JavaScript in the context of a victim's session.

Business Impact

The ability to execute arbitrary JavaScript allows an attacker to steal session tokens, effectively bypassing authentication mechanisms. Given the High CVSS score of 8.7, this represents a significant risk of full account takeover, which could lead to unauthorized data access, manipulation of AI models, or administrative compromise of the platform.

Remediation Plan

Immediate Action: Update the Open WebUI platform to version 0.6.37 or later immediately to incorporate the necessary input sanitization.

Proactive Monitoring: Review web application logs for suspicious file imports or unusual patterns in user session activity that may indicate token theft attempts.

Compensating Controls: Implement a robust Content Security Policy (CSP) to restrict the execution of inline scripts and prevent the loading of unauthorized resources from external domains.

Exploitation Status

Public Exploit Available: No (exploit_available unknown).

Analyst Notes: As of 2025-12-05, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly exploitable as it does not require complex interaction beyond the victim initiating a PDF export.

Analyst Recommendation

Due to the severity of this vulnerability and the potential for total account compromise, organizations utilizing Open WebUI must prioritize the application of the 0.6.37 update. Failure to remediate this flaw exposes the entire platform to session hijacking and persistent unauthorized access by malicious actors.

Description Summary:
A Server-Side Request Forgery (SSRF) vulnerability in Open WebUI allows authenticated users to force the application to make HTTP requests to arbitrary internal or external URLs.

Executive Summary:
A high-severity Server-Side Request Forgery vulnerability in Open WebUI allows authenticated attackers to perform unauthorized internal network requests and access sensitive cloud metadata.

Vulnerability Details

CVE-ID: CVE-2025-65958

Affected Software: Open WebUI

Affected Versions: < 0.6.37

Vulnerability: The application is susceptible to CWE-918: Server-Side Request Forgery (SSRF). Any authenticated user can trigger the server to perform arbitrary HTTP requests, enabling access to internal services or cloud provider metadata endpoints.

Business Impact

The ability to perform SSRF poses a significant risk to the internal network infrastructure. An attacker can leverage this flaw to bypass firewall protections, scan internal assets, or steal sensitive cloud instance metadata, which could lead to full compromise of the hosting environment. Given the CVSS score of 8.5, this vulnerability represents a high risk to confidentiality and data security.

Remediation Plan

Immediate Action: Upgrade Open WebUI to version 0.6.37 or later to resolve the underlying SSRF vulnerability.

Proactive Monitoring: Review web server access logs for anomalous outbound requests to unexpected internal IP addresses or cloud metadata services.

Compensating Controls: Implement strict network egress filtering on the host server to prevent it from initiating unauthorized connections to sensitive internal subnets or cloud metadata APIs.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of 2025-12-08, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is inherently dangerous because it allows an attacker to pivot from a web application into the underlying internal network.

Analyst Recommendation

Due to the potential for internal network reconnaissance and cloud metadata exfiltration, this vulnerability poses a substantial risk to organizational security. Administrators should prioritize updating to version 0.6.37 immediately to eliminate this attack vector. If patching is not immediately feasible, ensure that the application container or host is isolated from sensitive internal network segments and cloud metadata endpoints.

Description Summary:
Open WebUI contains a code injection vulnerability in the Direct Connections feature, allowing malicious external servers to execute arbitrary JavaScript in victim browsers, leading to account takeover.

Executive Summary:
A code injection vulnerability in Open WebUI versions 0.6.224 and prior allows remote attackers to achieve browser-based JavaScript execution, resulting in session theft and potential backend remote code execution.

Vulnerability Details

CVE-ID: CVE-2025-64496

Affected Software: Open WebUI

Affected Versions: < 0.6.35

Vulnerability: This vulnerability is an improper neutralization of directives in dynamically evaluated code (CWE-95) within the Direct Connections feature. An authenticated user or administrator can be tricked into adding a malicious model URL, which allows an attacker to execute arbitrary JavaScript in the victim's browser via Server-Sent Event (SSE) events.

Business Impact

The exploitation of this flaw leads to authentication token theft and complete account takeover for affected users. Furthermore, when chained with the Functions API, the vulnerability enables remote code execution on the backend server. Given the CVSS score of 7.3, this represents a high-severity risk to the integrity and confidentiality of the platform and its underlying infrastructure.

Remediation Plan

Immediate Action: Update Open WebUI to version 0.6.35 or later immediately to apply the necessary security patches.

Proactive Monitoring: Review system logs for unauthorized additions of external model URLs or suspicious activity originating from the Direct Connections feature.

Compensating Controls: Disable the Direct Connections feature if it is not strictly required for business operations, as this prevents the attack vector entirely.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of November 9, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability relies on social engineering to entice users to connect to a malicious server, which is the primary barrier to entry.

Analyst Recommendation

The potential for full account takeover and backend remote code execution makes this a high-priority item for security teams. Administrators should verify the current version of their Open WebUI deployment and proceed with an immediate upgrade to 0.6.35. If an upgrade cannot be performed immediately, disabling the Direct Connections functionality is the most effective way to mitigate this risk.

Description Summary:
Open WebUI is vulnerable to DOM-based Cross-site Scripting (XSS) due to improper sanitization of custom prompts, allowing authenticated users to inject malicious scripts into the chat interface.

Executive Summary:
Open WebUI versions 0.6.34 and below contain a DOM-based cross-site scripting vulnerability that allows authenticated users to execute arbitrary code in the browsers of other users.

Vulnerability Details

CVE-ID: CVE-2025-64495

Affected Software: Open WebUI Open WebUI

Affected Versions: < 0.6.35

Vulnerability: The application fails to sanitize prompt bodies when the "Insert Prompt as Rich Text" feature is enabled, assigning input directly to an innerHTML sink. An authenticated user with prompt creation permissions can plant a malicious payload that triggers when another user executes the corresponding command.

Business Impact

This vulnerability carries a CVSS score of 8.7, indicating high severity. Successful exploitation could lead to session hijacking, unauthorized actions performed on behalf of other users, and potential theft of sensitive information processed within the AI platform, resulting in significant reputational damage and loss of user trust.

Remediation Plan

Immediate Action: Update Open WebUI to version 0.6.35 or later immediately to apply the necessary input sanitization patches.

Proactive Monitoring: Review web server and application logs for suspicious activity involving custom prompt creation or unusual URL parameters, and monitor for unexpected client-side script execution.

Compensating Controls: Implement a strict Content Security Policy (CSP) to restrict the sources from which scripts can be executed and deploy a Web Application Firewall (WAF) to detect and block common XSS injection patterns.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of November 10, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly exploitable due to the direct assignment of user-controlled input to an unsafe DOM sink.

Analyst Recommendation

Given the potential for lateral movement within the application and the high CVSS score, organizations should prioritize patching this vulnerability. Apply the update to version 0.6.35 across all instances to eliminate the risk of XSS-based attacks, and ensure that user permissions regarding prompt creation are strictly managed until the patch is fully deployed.