← All credits

Classic298

19 vulnerability records and advisories credit this contributor.

CVE-2026-109295

Open WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowledge_files Event Loop

CVE-2026-109290

Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview

CVE-2026-109285

Open WebUI 0.6.0 before 0.11.4 Improper Access Control via Stale File Metadata

CVE-2026-109297

Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence Rules

CVE-2026-109296

Open WebUI before 0.11.4 Missing Authorization via Backend Index on Model Routes

CVE-2026-109292

Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections

CVE-2026-109291

Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citation embed_url

CVE-2026-109287

Open WebUI 0.9.6 before 0.11.4 Information Disclosure via Unscoped Directory ID

CVE-2026-109286

Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModal