O
Vendor security profile
open-webui
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs53
Critical0
CISA KEV0
Public exploit28
Patch rate%81
Avg. CVSS6.2
12-month vulnerability rate
0
0
1
0
1
0
2
1
6
18
18
0
CVE KEV
CVE severity distribution
53toplam CVE
High18 (34%)
Medium27 (51%)
Low3 (6%)
Uncertain5 (9%)
Patch and exploitation view
%81
Verified patch
%0
CISA KEV
%53
Public exploit
43Patch available
0Partial
1Workaround
0Vendor: no patch
9Unknown
Latest vulnerabilities
6.5
CVE-2026-88006
Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange
O
Patch verifiedEPSS %0
6.5
CVE-2026-88005
Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange
O
Patch verifiedEPSS %0
6.5
CVE-2026-88002
Open WebUI: Any authenticated user can hang the server via a cyclic chat message history
O
Patch verifiedEPSS %1
5.0
CVE-2026-88001
Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets
O
Patch verifiedEPSS %0
6.5
CVE-2026-88000
Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree
O
Patch verifiedEPSS %1
7.1
CVE-2026-87999
Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch
O
Patch verifiedEPSS %0
7.1
CVE-2026-87998
Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion
O
Patch verifiedEPSS %0
4.3
CVE-2026-87997
Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions
O
Patch verifiedEPSS %0
7.7
CVE-2026-87996
Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader
O
Patch verifiedEPSS %0
8.7
CVE-2026-87995
Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin
O
Patch verifiedEPSS %0