| CVE-2025-46571 | MITTEL5.4 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.6, low privileged users can upload HTML files which contain JavaScript code via the `/api/v1/files/` backend endpoint. This endpoint returns a file id, which can be used to open the file in the browse | 05/05/2025 |
| GHSA-5ccf-884p-4jjq | HOCH7.5 | Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability | 20/03/2025 |
| GHSA-6wj5-5pgr-jwq8 | HOCH7.5 | Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability in api/chat/file | 20/03/2025 |
| GHSA-w466-2wfc-8g58 | HOCH7.5 | Open WebUI has vulnerable dependency on starlette via fastapi | 20/03/2025 |
| CVE-2024-8053 | HOCH8.2 | In version v0.3.10 of open-webui/open-webui, the `api/v1/utils/pdf` endpoint lacks authentication mechanisms, allowing unauthenticated attackers to access the PDF generation service. This vulnerability can be exploited by sending a POST request with an excessively large payload, potentially leading to server resource e | 20/03/2025 |
| CVE-2024-7983 | HOCH7.5 | In version 0.3.8 of open-webui, an endpoint for converting markdown to HTML is exposed without authentication. A maliciously crafted markdown payload can cause the server to spend excessive time converting it, leading to a denial of service. The server becomes unresponsive to other requests until the conversion is comp | 20/03/2025 |
| CVE-2024-7044 | HOCH8.9 | A Stored Cross-Site Scripting (XSS) vulnerability exists in the chat file upload functionality of open-webui/open-webui version 0.3.8. An attacker can inject malicious content into a file, which, when accessed by a victim through a URL or shared chat, executes JavaScript in the victim's browser. This can lead to user d | 20/03/2025 |
| CVE-2024-7043 | HOCH8.8 | An improper access control vulnerability in open-webui/open-webui v0.3.8 allows attackers to view and delete any files. The application does not verify whether the attacker is an administrator, allowing the attacker to directly call the GET /api/v1/files/ interface to retrieve information on all files uploaded by users | 20/03/2025 |
| CVE-2024-7035 | MITTEL6.9 | In version v0.3.8 of open-webui/open-webui, sensitive actions such as deleting and resetting are performed using the GET method. This vulnerability allows an attacker to perform Cross-Site Request Forgery (CSRF) attacks, where an unaware user can unintentionally perform sensitive actions by simply visiting a malicious | 20/03/2025 |
| CVE-2024-7041 | MITTEL6.5 | An Insecure Direct Object Reference (IDOR) vulnerability exists in open-webui/open-webui version v0.3.8. The vulnerability occurs in the API endpoint `http://0.0.0.0:3000/api/v1/memories/{id}/update`, where the decentralization design is flawed, allowing attackers to edit other users' memories without proper authorizat | 09/10/2024 |
| CVE-2024-6706 | MITTEL6.1 | Attackers can craft a malicious prompt that coerces the language model into executing arbitrary JavaScript in the context of the web page. | 07/08/2024 |