Skip to content
Threat Feed
Subscribe

Product

Open-Webui

4 briefs RSS
critical advisory

Open WebUI Missing Authorization on Tool Update Endpoint Allows Privilege Escalation to Code Execution

Open WebUI is vulnerable to privilege escalation and code execution because a missing authorization check on the tool update endpoint allows a user with write access to a tool to replace the tool's server-side Python content and trigger execution, bypassing the intended `workspace.tools` security boundary.

Open WebUI privilege-escalation code-execution authorization
2r 2t
high advisory

Open WebUI IDOR Vulnerability in Retrieval API Allows Unauthorized Access and Modification of Knowledge Bases

Open WebUI is vulnerable to an IDOR vulnerability in its Retrieval API that bypasses knowledge base access controls, allowing any authenticated user who knows a private knowledge base UUID to read, inject content into, or overwrite another user's knowledge base.

Open WebUI idor authorization_bypass data_manipulation
2r 1t
high advisory

Open WebUI CORS Misconfiguration and Session Validation Vulnerability Leads to RCE

Open WebUI version v0.3.10 has a CORS misconfiguration and session validation issue that can lead to remote code execution due to a one-click attack against admin users.

open-webui cors rce session-management
2r 1t
high advisory

Open WebUI Arbitrary File Write/Delete via Path Traversal

Open WebUI is vulnerable to path traversal (CVE-2026-44565), allowing attackers to upload files to arbitrary locations on the web server's filesystem and subsequently delete them due to insufficient filename sanitization in the `/ollama/models/upload` API endpoint.

Open WebUI path-traversal file-deletion web-application
2r 1t