Low
CVE-2026-59715
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 161
Reset filters
High
CVE-2026-59219
Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout
Low
CVE-2026-59213
Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)
High
CVE-2026-59214
Open WebUI: Stored web worker XSS via Pyodide
Medium
CVE-2026-59218
Open WebUI: Account enumeration via observable login timing discrepancy
Medium
CVE-2026-45339
Open WebUI's API key endpoint restrictions bypassed via `x-api-key` header — full message processing on restricted endpoints
High
CVE-2026-26193
Open WebUI vulnerable to Stored XSS via iFrame embeds in response messages
Medium
CVE-2025-46571
Open WebUI allows limited stored XSS vila uploaded html file
High
CVE-2025-46719
Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions
Medium
CVE-2026-34225
Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionality
High
CVE-2026-26192
Open WebUI vulnerable to Stored XSS via iFrame in citations model
High
CVE-2026-54008
Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url` (incomplete-fix sibling of CVE-2026-45401)
High
CVE-2026-54010
Open WebUI: Forged chat-file link allows cross-user file read and deletion
High
CVE-2026-54012
Open WebUI: Forged model meta.knowledge allows cross-user file read and deletion
High
CVE-2026-54011
Open WebUI: Stored XSS in Mermaid Markdown Preview
High
CVE-2026-54013
Open WebUI: Stored XSS to Account Takeover via Model Profile Images
High
CVE-2026-54017
Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal
Medium
CVE-2026-54019
Open WebUI: RAG ACL Bypass in Milvus Multitenancy Mode
High
CVE-2026-54018
Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects
Medium
CVE-2026-54016
Open WebUI BOLA: `search_knowledge_files` Allows Unauthorized Knowledge Base File Enumeration
Medium
CVE-2026-54021
Open WebUI: Authenticated users can target arbitrary configured Ollama backends via unguarded url_idx path parameter
Medium
CVE-2026-54022
Open WebUI: Any authenticated user can read other users' private notes via Socket.IO
Medium
CVE-2026-54014
Open WebUI: Sibling-Prefix Path Traversal via /cache/{path}
Medium
CVE-2026-54009
Open WebUI: Cross-user file disclosure via /api/chat/completions image_url field
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.