O
Vendor security profile
openwebui
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs54
Critical4
CISA KEV0
Public exploit38
Patch rate%94
Avg. CVSS6.3
12-month vulnerability rate
0
0
0
0
0
0
0
0
19
17
18
0
CVE KEV
CVE severity distribution
54toplam CVE
Critical4 (7%)
High15 (28%)
Medium33 (61%)
Low2 (4%)
Patch and exploitation view
%94
Verified patch
%0
CISA KEV
%70
Public exploit
51Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
6.5
CVE-2026-88006
Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange
O
Patch verifiedEPSS %0
6.5
CVE-2026-88005
Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange
O
Patch verifiedEPSS %0
6.5
CVE-2026-88002
Open WebUI: Any authenticated user can hang the server via a cyclic chat message history
O
Patch verifiedEPSS %1
5.0
CVE-2026-88001
Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets
O
Patch verifiedEPSS %0
6.5
CVE-2026-88000
Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree
O
Patch verifiedEPSS %1
7.1
CVE-2026-87999
Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch
O
Patch verifiedEPSS %0
7.1
CVE-2026-87998
Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion
O
Patch verifiedEPSS %0
4.3
CVE-2026-87997
Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions
O
Patch verifiedEPSS %0
7.7
CVE-2026-87996
Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader
O
Patch verifiedEPSS %0
8.7
CVE-2026-87995
Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin
O
Patch verifiedEPSS %0