108 CVEs
open-webui Vulnerabilities
CVE security advisories and vulnerability history for open-webui.
108
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
89
Public exploits
With known exploit
6.7
Avg CVSS
2024–2026
Overview
open-webui has 108 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 89 have a known public exploit. The average CVSS base score across scored CVEs is 6.7.
This page aggregates every publicly disclosed vulnerability (CVE) affecting open-webui products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.
Severity and exploitation
How the CVSS severity of open-webui's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.