Known vulnerabilities in Open WebUI - page 6

Vendor: Open WebUI
Software: Open WebUI
Software CPE: cpe:2.3:a:open_webui:ollama_webui:*:*:*:*:*:*:*:*
Total vulnerabilities: 134
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Open WebUI Open WebUI is affected by 134 known vulnerabilities: 4 high, 24 medium, 106 low Critical High Medium Low

Vulnerabilities (134)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130178 - Missing Authorization
CVE-2026-44556
CWE-862 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU130177 - Improper Authorization
CVE-2026-44561
CWE-285 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU130176 - Improper Access Control
CVE-2026-44564
CWE-284 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU130175 - Missing Authorization
CVE-2026-44559
CWE-862 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU130174 - Improper Access Control
CVE-2026-44560
CWE-284 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU130173 - Improper Access Control
CVE-2026-44562
CWE-284 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU130172 - Improper Access Control
CVE-2026-44563
CWE-284 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU130171 - Improper Authentication
CVE-2026-44551
CWE-287 High
No
No
0.9.0 05.05.2026 SB2026050527
#VU130170 - Improper Access Control
CVE-2026-44554
CWE-284 Medium
No
No
0.9.0 05.05.2026 SB2026050527
#VU130169 - Improper Access Control
CVE-2026-44557
CWE-284 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU130168 - Improper Access Control
CVE-2026-44558
CWE-284 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU130167 - Improper Authorization
CVE-2026-44553
CWE-285 Medium
No
No
0.9.0 05.05.2026 SB2026050527
#VU130166 - Improper Access Control
CVE-2026-44555
CWE-284 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU130165 - Improper Access Control
CVE-2026-44550
CWE-284 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU127479 - Server-Side Request Forgery (SSRF)
CVE-2026-34225
CWE-918 Low
No
No
0.8.0 24.04.2026 SB2026042443
#VU127478 - Improper Authorization
CVE-2026-34222
CWE-285 Low
No
No
0.8.11 24.04.2026 SB2026042442
#VU127477 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-28786
CWE-22 Low
No
No
0.8.6 24.04.2026 SB2026042441
#VU127476 - Authorization Bypass Through User-Controlled Key
CVE-2026-29071
CWE-639 Low
No
No
0.8.6 24.04.2026 SB2026042441
#VU127475 - Authorization Bypass Through User-Controlled Key
CVE-2026-28788
CWE-639 Low
No
No
0.8.6 24.04.2026 SB2026042441
#VU127474 - Improper Access Control
CVE-2026-29070
CWE-284 Low
No
No
0.8.6 24.04.2026 SB2026042441


Showing elements 101 - 120 out of 134