Known vulnerabilities in Open WebUI - page 7

Vendor: Open WebUI
Software: Open WebUI
Software CPE: cpe:2.3:a:open_webui:ollama_webui:*:*:*:*:*:*:*:*
Total vulnerabilities: 161
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Open WebUI Open WebUI is affected by 161 known vulnerabilities: 6 high, 27 medium, 128 low Critical High Medium Low

Vulnerabilities (161)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130238 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-44566
CWE-22 Medium
No
No
0.1.124 06.05.2026 SB2026050626
#VU130182 - Insufficient Session Expiration
CWE-613 Medium
No
No
0.3.33 05.05.2026 SB20260505107
#VU130181 - Overly Permissive Cross-domain Whitelist
CVE-2026-56400
CWE-942 Medium
No
No
0.3.33 05.05.2026 SB20260505107
#VU130180 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-44565
CWE-22 Medium
No
No
0.6.10 05.05.2026 SB20260505106
#VU130179 - Server-Side Request Forgery (SSRF)
CVE-2026-56399
CWE-918 Low
No
No
0.6.27 05.05.2026 SB20260505105
#VU130177 - Improper Authorization
CVE-2026-44561
CWE-285 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU130176 - Improper Access Control
CVE-2026-44564
CWE-284 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU130175 - Missing Authorization
CVE-2026-44559
CWE-862 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU130174 - Improper Access Control
CVE-2026-44560
CWE-284 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU130173 - Improper Access Control
CVE-2026-44562
CWE-284 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU130172 - Improper Access Control
CVE-2026-44563
CWE-284 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU130171 - Improper Authentication
CVE-2026-44551
CWE-287 High
No
No
0.9.0 05.05.2026 SB2026050527
#VU130170 - Improper Access Control
CVE-2026-44554
CWE-284 Medium
No
No
0.9.0 05.05.2026 SB2026050527
#VU130169 - Improper Access Control
CVE-2026-44557
CWE-284 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU130168 - Improper Access Control
CVE-2026-44558
CWE-284 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU130167 - Improper Authorization
CVE-2026-44553
CWE-285 Medium
No
No
0.9.0 05.05.2026 SB2026050527
#VU130166 - Improper Access Control
CVE-2026-44555
CWE-284 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU130165 - Improper Access Control
CVE-2026-44550
CWE-284 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU130164 - Improper Access Control
CVE-2026-44552
CWE-284 Low
No
No
0.9.0 05.05.2026 SB2026050527
#VU129658 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-44721
CWE-79 Low
No
No
0.9.0 05.05.2026 SB2026050527


Showing elements 121 - 140 out of 161