CVEs, die 0.10 betreffen
| CVE | Titel | CVSS | Ausgenutzt | EPSS | Veröffentlicht |
|---|---|---|---|---|---|
| CVE-2026-70482 | Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client | 8.8 | — | 2026-08-04 | |
| CVE-2026-87995 | Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin | 8.7 | — | 2026-09-09 | |
| CVE-2026-109286 | Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModal | 8.6 | — | 2026-10-13 | |
| CVE-2026-109291 | Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citation embed_url | 8.5 | — | 2026-10-13 | |
| CVE-2026-70494 | Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolde... | 8.1 | — | 2026-08-04 | |
| CVE-2026-87016 | Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite | 8.1 | — | 2026-09-09 | |
| CVE-2026-70479 | Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader | 7.7 | — | 2026-08-04 | |
| CVE-2026-87996 | Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader | 7.7 | — | 2026-09-09 | |
| CVE-2026-109292 | Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections | 7.6 | — | 2026-10-13 | |
| CVE-2026-87011 | Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout | 7.5 | — | 2026-09-09 | |
| CVE-2026-109572 | Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy | 7.2 | — | 2026-10-13 | |
| CVE-2026-109288 | Open WebUI before 0.11.4 Stored XSS via javascript: URLs in Markdown Links | 7.2 | — | 2026-10-13 | |
| CVE-2026-70485 | Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs | 7.1 | — | 2026-08-04 | |
| CVE-2026-87998 | Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion | 7.1 | — | 2026-09-09 | |
| CVE-2026-87999 | Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch | 7.1 | — | 2026-09-09 | |
| CVE-2026-109299 | Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validation | 7.1 | — | 2026-10-13 | |
| CVE-2026-109294 | Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Image | 7.1 | — | 2026-10-13 | |
| CVE-2026-87015 | Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication | 6.8 | — | 2026-09-09 | |
| CVE-2026-70487 | Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadata | 6.5 | — | 2026-08-04 | |
| CVE-2026-88000 | Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree | 6.5 | — | 2026-09-09 | |
| CVE-2026-70493 | Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrop... | 6.5 | — | 2026-08-04 | |
| CVE-2026-70491 | Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints | 6.5 | — | 2026-08-04 | |
| CVE-2026-70489 | Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing | 6.5 | — | 2026-08-04 | |
| CVE-2026-88006 | Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange | 6.5 | — | 2026-09-10 | |
| CVE-2026-88002 | Open WebUI: Any authenticated user can hang the server via a cyclic chat message history | 6.5 | — | 2026-09-09 | |
| CVE-2026-87014 | Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes | 6.5 | — | 2026-09-09 | |
| CVE-2026-70490 | Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role check | 6.3 | — | 2026-08-04 | |
| CVE-2026-54020 | Open WebUI: DNS Rebinding SSRF Bypass | 6.3 | — | 2026-08-04 | |
| CVE-2026-70492 | Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages | 5.4 | — | 2026-08-04 | |
| CVE-2026-70481 | Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages | 5.4 | — | 2026-08-04 | |
| CVE-2026-70484 | Open WebUI: Users denied the image-generation permission can still generate images via chat completions | 5.4 | — | 2026-08-04 | |
| CVE-2026-70486 | Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-origin | 5.4 | — | 2026-08-04 | |
| CVE-2026-109289 | Open WebUI 0.8.8 before 0.11.4 Improper Session Revocation via Terminal WebSocket | 5.3 | — | 2026-10-13 | |
| CVE-2026-109287 | Open WebUI 0.9.6 before 0.11.4 Information Disclosure via Unscoped Directory ID | 5.3 | — | 2026-10-13 | |
| CVE-2026-109296 | Open WebUI before 0.11.4 Missing Authorization via Backend Index on Model Routes | 5.3 | — | 2026-10-13 | |
| CVE-2026-109300 | Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call Embeds | 5.1 | — | 2026-10-13 | |
| CVE-2026-88001 | Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets | 5.0 | — | 2026-09-09 | |
| CVE-2026-70483 | Open WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpoint | 4.3 | — | 2026-08-04 | |
| CVE-2026-87994 | Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint | 4.3 | — | 2026-09-09 | |
| CVE-2026-87997 | Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions | 4.3 | — | 2026-09-09 | |
| CVE-2026-87017 | Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backen... | 4.3 | — | 2026-09-09 | |
| CVE-2026-87013 | Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle | 4.3 | — | 2026-09-09 | |
| CVE-2026-87012 | Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value | 4.3 | — | 2026-09-09 | |
| CVE-2026-70488 | Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanup | 4.3 | — | 2026-08-04 | |
| CVE-2026-70480 | Open WebUI: Client-side SSRF via unrestricted external resource loading in Vega/Vega-Lite chart rendering | 4.1 | — | 2026-08-04 | |
| CVE-2026-109285 | Open WebUI 0.6.0 before 0.11.4 Improper Access Control via Stale File Metadata | 2.3 | — | 2026-10-13 |
Verfolgen Sie diese Versionen auf Ihren eigenen Servern
InfraGuard erfasst die installierten Softwareversionen auf jedem Server und markiert diejenigen mit bekannten Schwachstellen. Self-Hosted – nichts verlässt Ihr Netzwerk.
Daten: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (siehe EPSS unter https://www.first.org/epss), endoflife.date. Softwareliste: awesome-selfhosted (CC BY-SA 3.0).