openwebui vulnerabilities

Recent CVEs affecting openwebui products. 18 tracked.

openwebui has 18 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 18. Most recent: 2026-09-10. Highest priority: CVE-2026-87016 (score 50/100).

• CVE-2026-88005 MEDIUM 6.5 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-88006 MEDIUM 6.5 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87017 MEDIUM 4.3 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87994 MEDIUM 4.3 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87995 HIGH 8.7 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87996 HIGH 7.7 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87997 MEDIUM 4.3 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87998 HIGH 7.1 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87999 HIGH 7.1 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87011 HIGH 7.5 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87012 MEDIUM 4.3 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87013 MEDIUM 4.3 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87014 MEDIUM 6.5 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87015 MEDIUM 6.8 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-87016 HIGH 8.1 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-88002 MEDIUM 6.5 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-88001 MEDIUM 5.0 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform
• CVE-2026-88000 MEDIUM 6.5 UPGRADE Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform

FAQ

How do I fix openwebui vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is openwebui being exploited right now?

None of the tracked openwebui CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which openwebui CVE should I patch first?

CVE-2026-87016 currently ranks highest (50/100): Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

Products

• open webui

RSS feed for openwebui · ← Back to latest CVEs