Open WebUI: Open WebUI has stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html}…
Affects: Open WebUI
Advisories
Security advisories for popular AI software, newest first, each linked to its public source.
282 advisories rated Medium
Open WebUI: Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF) via Image URL Manipulation
Affects: Open WebUI
Open WebUI: Open WebUI has XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/image
Affects: Open WebUI
Open WebUI: Open WebUI has Stored Cross-Site Scripting In Profile Picture
Affects: Open WebUI
Open WebUI: Open WebUI's Improper Authorization in Standard Channels Allows Message Updates with Read…
Affects: Open WebUI
Open WebUI: Open WebUI Vulnerable to Unauthenticated RAG Configuration Disclosure
Affects: Open WebUI
Open WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation…
Affects: Open WebUI
Open WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt…
Affects: Open WebUI
Open WebUI: Open WebUI has an IDOR vulnerability in the pin_channel_message API endpoint
Affects: Open WebUI
Open WebUI: Open WebUI has an IDOR vulnerability in the update_message_by_id API endpoint
Affects: Open WebUI
Open WebUI: Prior to 0.9.0, Open WebUI allows admins to restrict which API endpoints an API key can access
Affects: Open WebUI
Open WebUI: Open WebUI has Stored XSS in Pending User Overlay via Incorrect DOMPurify Application Order
Affects: Open WebUI
Open WebUI: Read-Only Open WebUI Users Can Modify Collaborative Documents via Socket.IO
Affects: Open WebUI
Open WebUI: Open WebUI's Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings…
Affects: Open WebUI
Open WebUI: Open WebUI's Model Import Overwrites Any Model Without Ownership Check
Affects: Open WebUI
Open WebUI: Deactivated Channel Members Retain Full Access to Group/DM Channels
Affects: Open WebUI
Open WebUI: Open WebUI has Unauthorized File and Knowledge Base Content Access via RAG Vector Search
Affects: Open WebUI
Open WebUI: Open WebUI Missing Access Check on Channel Members Endpoint for Standard Channels
Affects: Open WebUI
Open WebUI: Open WebUI's Channel Access Grants Bypass filter_allowed_access_grants
Affects: Open WebUI
Open WebUI: Open WebUI vulnerable to Global Knowledge Base Enumeration via knowledge-bases Meta-Collection
Affects: Open WebUI
Open WebUI: Open WebUI's Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users'…
Affects: Open WebUI
vLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parameters
Affects: vLLM
AnythingLLM: Prior to version 1.12.1, GET /api/workspace/:slug/tts/:chatId in AnythingLLM returns the…
Affects: AnythingLLM
Flowise: A weakness has been identified in FlowiseAI Flowise up to 3.0.12
Affects: Flowise
Flowise: Bcrypt Password Hash Exposure
Affects: Flowise
Jupyter: Jupyter Server's Authentication Cookies Remain Valid After Password Reset and Server Restart
Affects: Jupyter
Dify: Dify before version 1.14.0 contains an authorization bypass vulnerability that allows…
Affects: Dify
Jupyter: Jupyter Server has an open redirection vulnerability in `next` query parameter
Affects: Jupyter
n8n: Prior to versions 1.123.32, 2.17.4, and 2.18.1, the /mcp-oauth/register endpoint accepted OAuth…
Affects: n8n
n8n: Prior to versions 1.123.32, 2.17.4, and 2.18.1, the /chat WebSocket endpoint used by the Chat…
Affects: n8n
n8n: Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with a valid API key…
Affects: n8n
Dify: Prior to version 1.13.1, using the method POST /api/files/upload, any unauthenticated user can…
Affects: Dify