← All credits

Classic298

19 vulnerability records and advisories credit this contributor.

CVE-2026-109572

Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy

CVE-2026-109299

Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validation

CVE-2026-109298

Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regex

CVE-2026-109297

Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence Rules

CVE-2026-109296

Open WebUI before 0.11.4 Missing Authorization via Backend Index on Model Routes

CVE-2026-109295

Open WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowledge_files Event Loop

CVE-2026-109294

Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Image

CVE-2026-109293

Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint

CVE-2026-109292

Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections

CVE-2026-109291

Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citation embed_url