Open WebUI's Channel Access Grants Bypass filter_allowed_access_grants
CVE-2026-44558
# Channel Access Grants Bypass filter_allowed_access_grants ## Affected Component Channel creation and update endpoint
#pip
共收录 834 条相关情报。
← 返回所有主题Open WebUI's responses passthrough endpoint lacks access control authorization
CVE-2026-44556
## Summary The /responses endpoint in the OpenAI router accepts any authenticated user and forwards requests directly t
Open WebUI's Base Model Routing Bypasses Access Control via Model Chaining
CVE-2026-44555
# Base Model Routing Bypasses Access Control via Model Chaining ## Affected Component Model chaining via `base_model_i
Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning
CVE-2026-44552
# Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning ## A
Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access
CVE-2026-44553
# Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access ## Affected Component Socket
Open WebUI's Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts
CVE-2026-44550
# Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts ## Affected Component Fo
Open WebUI has an LDAP Empty Password Authentication Bypass
CVE-2026-44551
# LDAP Empty Password Authentication Bypass ## Affected Component LDAP authentication endpoint: - `backend/open_webui/
Bunsink has an SSRF bypass in `validate_webhook_url`
CVE-2026-44502
## Summary Bugsink’s webhook URL validation in versions 2.1.2 and earlier could be (partially) bypassed because of a mi
open-webui Vulnerable to Stored XSS via Model Description
CVE-2026-44721
> [!IMPORTANT] > Relationship to CVE-2024-7990 > CVE-2024-7990 (issued by huntr.dev, March 2025) describes a stored XS
utcp-http vulnerable to SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol
CVE-2026-44661
## Summary The `utcp-http` plugin is vulnerable to a blind Server-Side Request Forgery (SSRF) caused by a trust-boundar
netbox-data-flows has stored XSS in ObjectAlias names rendered inside DataFlow tables
### Summary An authenticated user who can create or edit `ObjectAlias` objects can store arbitrary HTML/JavaScript in an
Microsoft APM CLI's plugin.json component paths escape plugin root and copy arbitrary host files during install
CVE-2026-44641
### Summary Microsoft APM normalizes marketplace plugins by copying plugin components referenced in `plugin.json` into `
BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context
CVE-2026-40610
### Summary BentoML's `bentoml build` packaging workflow follows attacker-controlled symlinks inside the build context a
docling-graph has SSRF via Missing Internal IP Validation in URLInputHandler
CVE-2026-44520
### Impact The `URLInputHandler` class in `docling_graph/core/input/handlers.py` makes HTTP requests to user-supplied U
Diffusers: None.py has Trust Remote Code Bypass
## Background This vulnerability is found in the `DiffusionPipeline.from_pretrained` flow, which is used to load a pipe
Aegra has cross-user run injection in /threads/{thread_id}/runs (IDOR)
CVE-2026-44504
## Impact Aegra deployments running 0.9.0 through 0.9.6 with multiple authenticated users on a shared instance are vuln
Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect
CVE-2026-44503
### Summary The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9
Compromise of PyTorch Lightning PyPi Package Versions
CVE-2026-44484
# Security Advisory: Compromise of PyTorch Lightning PyPI Package Versions **Published:** 2026-04-30 **Last Updated:*
Weblate vulnerable to XSS via crafted Markdown
CVE-2026-44264
### Impact The Markdown renderer used in user comments and other user-provided content didn't properly sanitize some att
Weblate Vulnerable to Private Translation Enumeration via Screenshot API
CVE-2026-44263
### Impact The screenshots, tasks, and component link API allowed for the enumeration of translations in a project inac