Path traversal in Open WebUI - CVE-2026-44565
Published: May 5, 2026
Vulnerability identifier: #VU130180
CSH Severity: Medium
CVSS v4: 7.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-44565
CWE-ID: CWE-22
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to overwrite and delete arbitrary files.
The vulnerability exists due to path traversal in the /ollama/models/upload API route when handling file upload requests with a crafted filename. A remote user can upload a file with dot-segments in its filename to overwrite and delete arbitrary files.
The file is temporarily written to disk before being forwarded to an internal API and then removed, so exploitation is limited to files writable by the account running the web server.
Affected software
Open WebUI
How to mitigate CVE-2026-44565
Install security update from vendor's website.
Open WebUI - update to 0.6.10