open webui vulnerabilities and fixes

Recent CVEs affecting open webui, with upgrade or downgrade steps. 18 tracked.

Also searched as: openwebui.

open webui has 18 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 18. Most recent: 2026-09-10. Highest priority: CVE-2026-87016 (score 50/100).

• CVE-2026-88005 MEDIUM 6.5 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-88006 MEDIUM 6.5 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87017 MEDIUM 4.3 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87994 MEDIUM 4.3 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87995 HIGH 8.7 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87996 HIGH 7.7 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87997 MEDIUM 4.3 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87998 HIGH 7.1 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87999 HIGH 7.1 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87011 HIGH 7.5 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87012 MEDIUM 4.3 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87013 MEDIUM 4.3 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87014 MEDIUM 6.5 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87015 MEDIUM 6.8 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87016 HIGH 8.1 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-88002 MEDIUM 6.5 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-88001 MEDIUM 5.0 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-88000 MEDIUM 6.5 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform

FAQ

How do I fix open webui vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is open webui being exploited right now?

None of the tracked open webui CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which open webui CVE should I patch first?

CVE-2026-87016 currently ranks highest (50/100): Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

RSS feed for open webui · ← Back to latest CVEs