Alta
CVE-2026-70485
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 161
Restablecer filtros
Media
CVE-2026-54020
Open WebUI: DNS Rebinding SSRF Bypass
Media
CVE-2026-70484
Open WebUI: Users denied the image-generation permission can still generate images via chat completions
Media
CVE-2026-70489
Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing
Media
CVE-2026-70487
Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadata
Media
CVE-2026-70490
Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role check
Baja
CVE-2026-70483
Open WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpoint
Alta
CVE-2026-70479
Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader
Media
CVE-2026-70480
Open WebUI: Client-side SSRF via unrestricted external resource loading in Vega/Vega-Lite chart rendering
Alta
CVE-2026-70482
Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client
Media
CVE-2026-70481
Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages
Media
CVE-2026-59225
Open WebUI: Arena task endpoints can bypass underlying model access controls
Media
CVE-2026-59223
Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching
Alta
CVE-2026-59221
open-webui terminal proxy path traversal guard bypass via 9x encoded traversal
Media
CVE-2026-59222
Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials
Baja
CVE-2026-59215
Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding
Media
CVE-2026-59212
Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete
Alta
CVE-2026-59224
Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id header and ws_terminal session_id query injection)
Alta
CVE-2026-59714
Open WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel message_ids)
Alta
CVE-2026-59216
Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id
Media
CVE-2026-59217
Open WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can add files to KB)
Media
CVE-2026-59227
Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permission
Baja
CVE-2026-59226
Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocation
Media
CVE-2026-59220
Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.