Openwebui vulnerabilities
We track 5 vulnerabilities in Openwebui products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on March 20, 2025.
Latest Openwebui vulnerabilities
- 8.2 High severity
open-webui/open-webui: Missing Authentication for Critical Functionality
In version v0.3.10 of open-webui/open-webui, the `api/v1/utils/pdf` endpoint lacks authentication mechanisms, allowing unauthenticated attackers to access the PDF generation service. This vulnerability can be exploited by sending a POST request with an excessi
- 9.0 Critical severity
open-webui/open-webui: Improper Neutralization of Input During Web Page Generation
An XSS vulnerability exists in open-webui/open-webui versions <= 0.3.8, specifically in the function that constructs the HTML for tooltips. This vulnerability allows attackers to perform operations with the victim's privileges, such as stealing chat history, d
- 7.5 High severity
open-webui/open-webui: Allocation of Resources Without Limits or Throttling
In version 0.3.8 of open-webui, an endpoint for converting markdown to HTML is exposed without authentication. A maliciously crafted markdown payload can cause the server to spend excessive time converting it, leading to a denial of service. The server becomes
- 8.9 High severity
open-webui/open-webui: Improper Neutralization of Input During Web Page Generation
A Stored Cross-Site Scripting (XSS) vulnerability exists in the chat file upload functionality of open-webui/open-webui version 0.3.8. An attacker can inject malicious content into a file, which, when accessed by a victim through a URL or shared chat, executes
- 8.8 High severity
open-webui/open-webui: Missing Authorization
An improper access control vulnerability in open-webui/open-webui v0.3.8 allows attackers to view and delete any files. The application does not verify whether the attacker is an administrator, allowing the attacker to directly call the GET /api/v1/files/ inte