CVE-2024-30256

MEDIUM 6.4CVE-2024-30256 · Published 16/04/2024 · updated 17/06/2026

In short

CVE-2024-30256 is a MEDIUM (CVSS 6.4) vulnerability affecting open webui (openwebui).
Chance of exploitation in the next 30 days (EPSS): 0.41%, higher than 35.5% of all vulnerabilities.
Fix: update to 0.1.117 or later.

Package	Affected versions	Patched versions
open webui openwebui	`< 0.1.117`	`0.1.117`

Description

Open WebUI is a user-friendly WebUI for LLMs. Open-webui is vulnerable to authenticated blind server-side request forgery. This vulnerability is fixed in 0.1.117.

References

open-webui/open-webui security advisory · Vendor Advisory
securitylab.github.com/advisories/GHSL-2024-033_open-webui · Exploit

More vulnerabilities in open webui

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

open webui

openwebui

< 0.1.117

0.1.117

More vulnerabilities in open webui

See all →