Products: 1
Vulnerabilities: 162
Known Exploited: 0
2
Critical Level Threats
68
High Level Threats
74
Medium Level Threats
8
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-88006
Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange
Last Modified: Sep 11, 2026
Published: Sep 10, 2026
CVE-2026-88005
Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange
Last Modified: Sep 11, 2026
Published: Sep 10, 2026
CVE-2026-88002
Open WebUI: Any authenticated user can hang the server via a cyclic chat message history
Last Modified: Sep 10, 2026
Published: Sep 09, 2026
CVE-2026-88001
Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets
Last Modified: Sep 10, 2026
Published: Sep 09, 2026
CVE-2026-88000
Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree
Last Modified: Sep 10, 2026
Published: Sep 09, 2026
Items Per Page
