← All credits

Classic298

19 vulnerability records and advisories credit this contributor.

CVE-2026-109572

Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy

CVE-2026-109299

Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validation

CVE-2026-109298

Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regex

CVE-2026-109294

Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Image

CVE-2026-109293

Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint

CVE-2026-109289

Open WebUI 0.8.8 before 0.11.4 Improper Session Revocation via Terminal WebSocket

CVE-2026-109288

Open WebUI before 0.11.4 Stored XSS via javascript: URLs in Markdown Links

CVE-2026-109284

Open WebUI 0.11.0 before 0.11.4 Improper Authorization via Chat Fork Endpoint

CVE-2026-109283

Open WebUI 0.11.1 before 0.11.4 Authorization Bypass via OAuth Token Exchange

CVE-2026-109300

Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call Embeds