Open WebUI
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 75 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 16, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy
New blog: Hands Off the Keyboard
Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call Embeds
Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validation
Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence Rules
Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regex
Open WebUI before 0.11.4 Missing Authorization via Backend Index on Model Routes
Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Image
Open WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowledge_files Event Loop
Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint
Monitor Open WebUI in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.