PT-2025-12173 · Unknown · Open-Webui

Published 2025-03-20 · Updated 2025-07-29 · CVE-2024-7033

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions open-webui/open-webui version 0.3.8

Description An arbitrary file write vulnerability exists in the download model endpoint. When deployed on Windows, the application improperly handles file paths, allowing an attacker to manipulate the file path to write files to arbitrary locations on the server's filesystem. This can result in overwriting critical system or application files, causing denial of service, or potentially achieving remote code execution (RCE). RCE can allow an attacker to execute malicious code with the privileges of the user running the application, leading to a full system compromise.

Recommendations For open-webui/open-webui version 0.3.8, restrict access to the download model endpoint to prevent unauthorized file writes.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-29

Related Identifiers

CVE-2024-7033

GHSA-3P9Q-7W63-3F8Q

Affected Products

Open-Webui

References · 7

• 🔥 https://huntr.com/bounties/7078261f-8414-4bb7-9d72-a2a4d8bfd5d1 · Exploit
• https://osv.dev/vulnerability/GHSA-3p9q-7w63-3f8q · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-7033 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-7033 · Security Note
• https://github.com/open-webui/open-webui · Note
• https://twitter.com/CVEnew/status/1902968860413923454 · Twitter Post
• https://t.me/cveNotify/130139 · Telegram Post