How many CVEs does Open WebUI have?

Open WebUI has 135 published CVE records since 2024, including 128 in the last two years.

How many Open WebUI CVEs are in CISA KEV?

None of Open WebUI's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which Open WebUI products have the most CVEs?

The Open WebUI products with the most published CVEs are open-webui, Open WebUI, open-webui/open-webui, open-webu.

What are the most common weakness types in Open WebUI CVEs?

Open WebUI's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-918 (Server-Side Request Forgery (SSRF)).

Are there public exploits for Open WebUI vulnerabilities?

Yes — 107 of Open WebUI's CVEs have a known public exploit.

How many critical Open WebUI vulnerabilities are there?

Open WebUI has 7 critical and 64 high-severity CVEs.

What is the average severity of Open WebUI CVEs?

The average CVSS base score across Open WebUI's scored CVEs is 6.8.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

135 CVEs

Open WebUI Vulnerabilities

Name: Open WebUI vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Open WebUI.

135

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

107

Public exploits

PoC or exploit code

6.8

Avg CVSS

2024–2026

Overview

Open WebUI has 135 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 107 have a known public exploit. The average CVSS base score across scored CVEs is 6.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Open WebUI products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on Open WebUI's vulnerability posture, as a share of its 135 published CVEs.

Average CVSS: 6.8
Critical / high: 53%
Actively exploited (KEV): 0%
Public exploit available: 79%
Patch available: 95%

Severity and exploitation

How the CVSS severity of Open WebUI's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical7

High64

Medium61

Low3

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Open WebUI's CVEs are currently listed in CISA's KEV catalog.

Public exploits

107

107 of Open WebUI's CVEs have a known public exploit available.

Most affected products

The Open WebUI products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Open WebUI CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Open WebUI CVE records.

Disclosure activity by year

How many Open WebUI CVEs were published each year.

2024

7

2025

22

2026

106

Latest Open WebUI CVEs

The most recently disclosed vulnerabilities affecting Open WebUI.

open-webui - Remote Code Execution via CORS Misconfiguration and Session Validation
CWE-613
Critical · CVSS 9.0
EPSS 0.3%2026-07-15
Open WebUI - Stored Cross-Site Scripting via OAuth Picture Claim SVG Data URI
CWE-20
High · CVSS 8.5
EPSS 0.4%2026-07-15
open-webui terminal proxy path traversal guard bypass via 9x encoded traversal
CWE-22
High · CVSS 7.7
EPSS 0.4%2026-07-09
Open WebUI: Arena task endpoints can bypass underlying model access controls
CWE-862
Medium · CVSS 6.3
EPSS 0.2%2026-07-09
Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id header and ws_terminal session_id query injection)
CWE-287
High · CVSS 8.0
EPSS 0.3%2026-07-09
Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete
CWE-863
Medium · CVSS 5.4
EPSS 0.3%2026-07-09
Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching
CWE-693
Medium · CVSS 4.3
EPSS 0.2%2026-07-09
Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials
CWE-200
Medium · CVSS 6.0
EPSS 0.3%2026-07-09
Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding
CWE-639
Low · CVSS 3.1
EPSS 0.3%2026-07-09
Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)
CWE-524
Medium · CVSS 5.0
EPSS 0.3%2026-07-09
Open WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can add files to KB)
CWE-862
Medium · CVSS 4.3
EPSS 0.3%2026-07-09
Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id
CWE-94
Critical · CVSS 9.0
EPSS 0.3%2026-07-09

Track new Open WebUI CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor Open WebUI CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

DrayTek137 CVEs HDFGroup136 CVEs Hitachi Energy136 CVEs themeum136 CVEs xmlsoft136 CVEs kubernetes135 CVEs Centreon134 CVEs WebKitGTK+133 CVEs

Browse all vendors

Frequently asked questions

Common questions about Open WebUI vulnerabilities.

How many CVEs does Open WebUI have?: Open WebUI has 135 published CVE records since 2024, including 128 in the last two years.
How many Open WebUI CVEs are in CISA KEV?: None of Open WebUI's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which Open WebUI products have the most CVEs?: The Open WebUI products with the most published CVEs are open-webui, Open WebUI, open-webui/open-webui, open-webu.
What are the most common weakness types in Open WebUI CVEs?: Open WebUI's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-918 (Server-Side Request Forgery (SSRF)).
Are there public exploits for Open WebUI vulnerabilities?: Yes — 107 of Open WebUI's CVEs have a known public exploit.
How many critical Open WebUI vulnerabilities are there?: Open WebUI has 7 critical and 64 high-severity CVEs.
What is the average severity of Open WebUI CVEs?: The average CVSS base score across Open WebUI's scored CVEs is 6.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Open WebUI vulnerabilities

Monitor new Open WebUI vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing