Behoben in
CVEs, die 0.11 betreffen
| CVE | Titel | CVSS | Ausgenutzt | EPSS | Veröffentlicht |
|---|---|---|---|---|---|
| CVE-2026-87995 | Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin | 8.7 | — | 2026-09-09 | |
| CVE-2026-109286 | Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModal | 8.6 | — | 2026-10-13 | |
| CVE-2026-109291 | Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citation embed_url | 8.5 | — | 2026-10-13 | |
| CVE-2026-109290 | Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview | 8.4 | — | 2026-10-13 | |
| CVE-2026-87016 | Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite | 8.1 | — | 2026-09-09 | |
| CVE-2026-87996 | Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader | 7.7 | — | 2026-09-09 | |
| CVE-2026-109292 | Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections | 7.6 | — | 2026-10-13 | |
| CVE-2026-87011 | Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout | 7.5 | — | 2026-09-09 | |
| CVE-2026-109572 | Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy | 7.2 | — | 2026-10-13 | |
| CVE-2026-109288 | Open WebUI before 0.11.4 Stored XSS via javascript: URLs in Markdown Links | 7.2 | — | 2026-10-13 | |
| CVE-2026-87998 | Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion | 7.1 | — | 2026-09-09 | |
| CVE-2026-87999 | Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch | 7.1 | — | 2026-09-09 | |
| CVE-2026-109298 | Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regex | 7.1 | — | 2026-10-13 | |
| CVE-2026-109293 | Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint | 7.1 | — | 2026-10-13 | |
| CVE-2026-109297 | Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence Rules | 7.1 | — | 2026-10-13 | |
| CVE-2026-109299 | Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validation | 7.1 | — | 2026-10-13 | |
| CVE-2026-109294 | Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Image | 7.1 | — | 2026-10-13 | |
| CVE-2026-87015 | Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication | 6.8 | — | 2026-09-09 | |
| CVE-2026-88000 | Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree | 6.5 | — | 2026-09-09 | |
| CVE-2026-88006 | Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange | 6.5 | — | 2026-09-10 | |
| CVE-2026-88002 | Open WebUI: Any authenticated user can hang the server via a cyclic chat message history | 6.5 | — | 2026-09-09 | |
| CVE-2026-87014 | Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes | 6.5 | — | 2026-09-09 | |
| CVE-2026-109283 | Open WebUI 0.11.1 before 0.11.4 Authorization Bypass via OAuth Token Exchange | 5.3 | — | 2026-10-13 | |
| CVE-2026-109284 | Open WebUI 0.11.0 before 0.11.4 Improper Authorization via Chat Fork Endpoint | 5.3 | — | 2026-10-13 | |
| CVE-2026-109295 | Open WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowledge_files Event Loop | 5.3 | — | 2026-10-13 | |
| CVE-2026-109289 | Open WebUI 0.8.8 before 0.11.4 Improper Session Revocation via Terminal WebSocket | 5.3 | — | 2026-10-13 | |
| CVE-2026-109287 | Open WebUI 0.9.6 before 0.11.4 Information Disclosure via Unscoped Directory ID | 5.3 | — | 2026-10-13 | |
| CVE-2026-109296 | Open WebUI before 0.11.4 Missing Authorization via Backend Index on Model Routes | 5.3 | — | 2026-10-13 | |
| CVE-2026-109300 | Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call Embeds | 5.1 | — | 2026-10-13 | |
| CVE-2026-88001 | Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets | 5.0 | — | 2026-09-09 | |
| CVE-2026-87994 | Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint | 4.3 | — | 2026-09-09 | |
| CVE-2026-87997 | Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions | 4.3 | — | 2026-09-09 | |
| CVE-2026-87017 | Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backen... | 4.3 | — | 2026-09-09 | |
| CVE-2026-87013 | Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle | 4.3 | — | 2026-09-09 | |
| CVE-2026-87012 | Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value | 4.3 | — | 2026-09-09 | |
| CVE-2026-109285 | Open WebUI 0.6.0 before 0.11.4 Improper Access Control via Stale File Metadata | 2.3 | — | 2026-10-13 |
Verfolgen Sie diese Versionen auf Ihren eigenen Servern
InfraGuard erfasst die installierten Softwareversionen auf jedem Server und markiert diejenigen mit bekannten Schwachstellen. Self-Hosted – nichts verlässt Ihr Netzwerk.
Daten: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (siehe EPSS unter https://www.first.org/epss), endoflife.date. Softwareliste: awesome-selfhosted (CC BY-SA 3.0).