AWS CLI: Disabled SSH host key verification in Amazon AWS CLI EMR helper commands
CVE-2026-18654
### Summary The AWS Command Line Interface (AWS CLI) is a unified tool to manage AWS services from the command line. An
#pip
共收录 834 条相关情报。
← 返回所有主题Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder
CVE-2026-70494
## Summary A user granted write access to a shared chat folder could permanently delete chats and messages belonging to
Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrophically
CVE-2026-70493
## Summary The built-in knowledge search tools let a chat participant choose the pattern used to grep knowledge files. P
Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages
CVE-2026-70492
## Summary Any authenticated user can store a chat message whose math block makes KaTeX fail with a stack overflow inste
Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints
CVE-2026-70491
## Summary A workspace tool shared with a read grant returned its full Python source to the recipient. Any authenticate
Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role check
CVE-2026-70490
## Summary The terminal WebSocket route authenticates its own first-message JWT instead of going through the HTTP depend
Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing
CVE-2026-70489
## Summary In every affected release, automation recurrence parsing anchors minutely and hourly rules at a fixed date of
Open WebUI: DNS Rebinding SSRF Bypass
CVE-2026-54020
## Summary Open WebUI vetted user-supplied URLs by resolving the hostname once and rejecting private, loopback and link-
Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadata
CVE-2026-70487
## Summary Open WebUI lets a client define a model inline on a chat request instead of selecting a saved workspace model
Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanup
CVE-2026-70488
## Summary A user with write access to one knowledge base could delete directories, and drop file embeddings, belonging
Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-origin
CVE-2026-70486
## Summary Any authenticated user with access to a terminal server could get script of their choosing to run in the Open
Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs
CVE-2026-70485
## Summary Open WebUI fetches user-supplied URLs on the server for RAG URL ingestion, URL-to-markdown conversion and we
Open WebUI: Users denied the image-generation permission can still generate images via chat completions
CVE-2026-70484
## Summary An authenticated user whose `features.image_generation` permission has been revoked can still make the server
Open WebUI: Client-side SSRF via unrestricted external resource loading in Vega/Vega-Lite chart rendering
CVE-2026-70480
## Summary Open WebUI renders `vega` and `vega-lite` fenced code blocks in chat content by building a Vega view in the v
Open WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpoint
CVE-2026-70483
## Summary `DELETE /api/v1/chats/{id}` cancelled a chat's in-flight tasks before it checked whether the caller was allow
Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client
CVE-2026-70482
## Summary The OAuth token exchange endpoint accepts a raw provider access token and validates it by calling the provid
Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages
CVE-2026-70481
## Summary On standard channels, the message update and delete handlers accepted any caller holding write access on the
Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader
CVE-2026-70479
## Summary With the Playwright web loader enabled, Open WebUI opens user-submitted URLs in a real browser and validates
python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees
CVE-2026-69248
### Summary If an intermediate constrained CA permits the DNS name `foo.example.com`, and the leaf certificate has a wil
python-cryptography: Duplicate self-signed intermediates can cause exponential path-building
CVE-2026-69249
### Summary When resolving invalid certificate chains that include duplicate copies of self-signed certificates, the pro