PyPI - OSV

PYSEC-2026-4129

PyPI/open-webui

Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange 4 days ago

Fix available
Severity - 6.5 (Medium)

PYSEC-2026-4117

PyPI/open-webui

Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout 4 days ago

Fix available
Severity - 7.5 (High)

PYSEC-2026-4126

PyPI/open-webui

Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value 4 days ago

Fix available
Severity - 4.3 (Medium)

PYSEC-2026-4121

PyPI/open-webui

Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle 4 days ago

Fix available
Severity - 4.3 (Medium)

PYSEC-2026-4127

PyPI/open-webui

Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes 4 days ago

Fix available
Severity - 6.5 (Medium)

PYSEC-2026-4124

PyPI/open-webui

Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication 4 days ago

Fix available
Severity - 6.8 (Medium)

PYSEC-2026-4128

PyPI/open-webui

Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite 4 days ago

Fix available
Severity - 8.1 (High)

PYSEC-2026-4125

PyPI/open-webui

Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends 4 days ago

Fix available
Severity - 4.3 (Medium)

PYSEC-2026-4122

PyPI/open-webui

Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint 4 days ago

Fix available
Severity - 4.3 (Medium)

PYSEC-2026-4123

PyPI/open-webui

Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin 4 days ago

Fix available
Severity - 8.7 (High)

PYSEC-2026-4120

PyPI/open-webui

Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader 4 days ago

Fix available
Severity - 7.7 (High)

PYSEC-2026-4118

PyPI/open-webui

Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions 4 days ago

Fix available
Severity - 4.3 (Medium)

PYSEC-2026-4115

PyPI/open-webui

Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion 4 days ago

Fix available
Severity - 7.1 (High)

PYSEC-2026-4116

PyPI/open-webui

Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch 4 days ago

Fix available
Severity - 7.1 (High)

PYSEC-2026-4119

PyPI/open-webui

Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange 4 days ago

Fix available
Severity - 6.5 (Medium)

GHSA-wvm9-9g5j-623f

PyPI/open-webui

Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange 10 Sep

Fix available
Severity - 6.5 (Medium)

Vulnerabilities