Our security policy lives in the documentation: docs.openwebui.com/security/security-policy. Please read it in full before submitting a report.
We accept vulnerability reports only through GitHub Security Advisories.
Repository navigation
Security: open-webui/open-webui
Security
docs/SECURITY.md
-
Revoked users keep signing in via token exchange when roles are only in the ID tokenGHSA-2rr4-q6pg-m5g3 published
Sep 27, 2026 by doge-woofModerate -
Read-only shared folder members can still add chats to the folder by forkingGHSA-6fjc-5cg3-mgvh published
Sep 27, 2026 by doge-woofModerate -
Channel members can post messages shown as a webhook via client-supplied message metadataGHSA-3vvh-g22g-jq6r published
Oct 18, 2026 by doge-woofModerate -
Knowledge base collaborators keep read and delete access to removed files via stale file metadataGHSA-9cxp-636w-4997 published
Sep 27, 2026 by doge-woofModerate -
Any website can steal a signed-in user's session token via the community stats message handlerGHSA-vpq8-f445-hcq7 published
Sep 27, 2026 by doge-woofHigh -
Directory structure of inaccessible knowledge bases disclosed via an unscoped directory idGHSA-jx3w-3pqq-7f3w published
Sep 27, 2026 by doge-woofModerate -
Users denied by the OAuth role policy can still sign in via token exchangeGHSA-wvm9-9g5j-623f published
Sep 9, 2026 by doge-woofModerate -
Viewer session token theft via javascript: URLs in chat message linksGHSA-wf9m-46cp-c6h6 published
Sep 27, 2026 by doge-woofModerate -
Deactivated users keep terminal command execution via an already open terminal WebSocketGHSA-6g45-8g27-fh8q published
Sep 27, 2026 by doge-woofModerate -
Terminal users can manage Terminals policies and other users' terminals via the terminal proxyGHSA-q46m-r89w-j74p published
Sep 28, 2026 by doge-woofHigh
Learn more about advisories related to open-webui/open-webui in the GitHub Advisory Database