Open WebUI: RAG ACL Bypass in Milvus Multitenancy Mode

CVE-2026-54019

# RAG ACL Bypass in Milvus Multitenancy Mode ## Summary This is a bypass of the fix for: - GHSA-h36f-rqpx-j5wx - CVE-

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal

CVE-2026-54017

### Summary The terminal-server reverse proxy in `backend/open_webui/routers/terminals.py` does not fully confine the u

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI BOLA: `search_knowledge_files` Allows Unauthorized Knowledge Base File Enumeration

CVE-2026-54016

## Summary Open WebUI has a Broken Object Level Authorization (BOLA) vulnerability in the builtin `search_knowledge_fil

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI Prompt history IDOR: unbound history_id allows cross-prompt read and deletion

CVE-2026-54015

## Summary Open WebUI's prompt version-history endpoints authorize the `prompt_id` in the URL but then act on caller-su

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: Stored XSS to Account Takeover via Model Profile Images

CVE-2026-54013

# Stored XSS to Account Takeover via Model Profile Images in Open WebUI **Affected:** Open WebUI ` tags. On the output

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: Forged model meta.knowledge allows cross-user file read and deletion

CVE-2026-54012

## Summary Open WebUI lets a user who can create, update, or import workspace models store arbitrary `meta.knowledge` e

历史摘要 · 未重新核验 · GitHub Advisory

PLANET VDR-300NU ADSL Router - 未授权修改DNS

PLANET VDR-300NU ADSL Router - 未授权修改DNS

历史摘要 · 未重新核验 · 知道创宇 / Seebug

Acknowledgements

Acknowledgements

历史摘要 · 未重新核验 · Android Security Bulletin

From One Thousand Pages of Specification to Unveiling Hidden Bugs: Large Language Model Assisted Fuzzing of Matter IoT Devices.

该论文针对Matter智能家居物联网协议的安全测试问题展开研究。Matter协议由连接标准联盟（CSA）维护，其规范文档长达上千页，复杂且庞大，导致传统模糊测试方法难以有效覆盖隐藏漏洞。作者提出了一种基于大语言模型（LLM）辅助的模糊测试方

历史摘要 · 未重新核验 · USENIX Security

BSFuzzer: Context-Aware Semantic Fuzzing for BLE Logic Flaw Detection.

蓝牙低功耗（BLE）已成为现代物联网设备的核心通信标准，但其协议设计的复杂性导致了许多逻辑缺陷，例如字段解析语义歧义或无效状态转换，可能被利用实现认证绕过、未授权控制或拒绝服务（DoS）攻击。现有黑盒模糊测试工具通常基于随机变异或简单语法，

历史摘要 · 未重新核验 · NDSS

IoTBec: An Accurate and Efficient Recurring Vulnerability Detection Framework for Black Box IoT devices.

本文提出 IoTBec，一种不依赖固件或源代码的物联网设备漏洞检测框架，专门用于发现黑盒设备中重复出现的漏洞。核心思路是构建“漏洞接口签名”（Vulnerability Interface Signature, VIS），该签名基于对黑盒接

历史摘要 · 未重新核验 · NDSS

Defending Language Models Against Image-Based Prompt Attacks via User-Provided Specifications.

本文针对多模态大语言模型（MLLM）面临的基于图像的提示注入攻击问题，提出了一种新型防御机制。随着人类通过图像与文本组合与聊天机器人交互的应用呈指数级增长，MLLM能够处理多种数据形式并理解用户意图，但针对提示注入攻击的防御研究相对不足，现

历史摘要 · 未重新核验 · IEEE S&P

Tinyproxy through 1.11.3, fixed in commit 364cdb6, fails to reject requests containing multiple...

CVE-2026-54388

Tinyproxy through 1.11.3, fixed in commit 364cdb6, fails to reject requests containing multiple Content-Length headers w

历史摘要 · 未重新核验 · GitHub Advisory

Tinyproxy through 1.11.3, fixed in commit ff45d3b, fails to reconcile conflicting Content-Length...

CVE-2026-54387

Tinyproxy through 1.11.3, fixed in commit ff45d3b, fails to reconcile conflicting Content-Length and Transfer-Encoding:

历史摘要 · 未重新核验 · GitHub Advisory

Hermes WebUI before 0.51.409 contains an authentication bypass vulnerability in passkey...

CVE-2026-55196

Hermes WebUI before 0.51.409 contains an authentication bypass vulnerability in passkey registration endpoints that allo

历史摘要 · 未重新核验 · GitHub Advisory

Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark...

CVE-2026-48591

Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark allows stored cross-site

历史摘要 · 未重新核验 · GitHub Advisory

Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security...

CVE-2026-30799

Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Identit

历史摘要 · 未重新核验 · GitHub Advisory

NVIDIA Spatial Intelligence Lab's (SIL) GEN3C contains an unauthenticated remote code execution...

CVE-2026-53805

NVIDIA Spatial Intelligence Lab's (SIL) GEN3C contains an unauthenticated remote code execution vulnerability in the inf

历史摘要 · 未重新核验 · GitHub Advisory

In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute...

CVE-2026-20266

In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute arbitrary OS commands

历史摘要 · 未重新核验 · GitHub Advisory

JimuReport versions 2.3.4 and below are vulnerable to remote code execution due to improper...

CVE-2026-36418

JimuReport versions 2.3.4 and below are vulnerable to remote code execution due to improper handling of Aviator expressi

历史摘要 · 未重新核验 · GitHub Advisory