Open Webui/Open Webui

Published: 2025-03-20T10:09:48.839Z
Updated: 2026-08-13T14:40:32.147Z

In version v0.3.10 of open-webui/open-webui, the `api/v1/utils/pdf` endpoint lacks authentication mechanisms, allowing unauthenticated attackers to access the PDF generation service. This vulnerability can be exploited by sending a POST request with an excessively large payload, potentially leading to server resource exhaustion and denial of service (DoS). Additionally, unauthorized users can misuse the endpoint to generate PDFs without verification, resulting in service misuse and potential operational and financial impacts.

Published: 2025-03-20T10:11:13.561Z
Updated: 2025-03-27T10:44:22.552Z

An XSS vulnerability exists in open-webui/open-webui versions <= 0.3.8, specifically in the function that constructs the HTML for tooltips. This vulnerability allows attackers to perform operations with the victim's privileges, such as stealing chat history, deleting chats, and escalating their own account to an admin if the victim is an admin.

Published: 2025-03-20T10:11:31.223Z
Updated: 2025-03-20T14:19:30.503Z

Published: 2025-03-20T10:08:55.590Z
Updated: 2026-08-13T14:41:16.989Z

In version 0.3.8 of open-webui, an endpoint for converting markdown to HTML is exposed without authentication. A maliciously crafted markdown payload can cause the server to spend excessive time converting it, leading to a denial of service. The server becomes unresponsive to other requests until the conversion is complete.

Published: 2025-03-20T10:10:35.664Z
Updated: 2025-10-15T12:49:52.820Z