PT-2025-12214 · Unknown · Open-Webui

Published 2025-03-20 · Updated 2025-03-21 · CVE-2024-8060

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenWebUI version 0.3.0

Description The issue concerns a vulnerability in the audio API endpoint /audio/api/v1/transcriptions that allows for arbitrary file upload. This is due to insufficient validation on the file.content type and the allowance of user-controlled filenames, leading to a path traversal vulnerability. An authenticated user can exploit this to overwrite critical files within the Docker container, potentially leading to remote code execution as the root user.

Recommendations For OpenWebUI version 0.3.0, consider disabling access to the /audio/api/v1/transcriptions endpoint until a patch is available to prevent arbitrary file uploads. Additionally, restrict the ability to set user-controlled filenames to minimize the risk of path traversal exploitation.

Fix

Unrestricted File Upload

Path traversal

Weakness Enumeration

CWE-434

CWE-22

Related Identifiers

CVE-2024-8060

GHSA-FF5C-56M7-VC75

Affected Products

Open-Webui

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-8060 · Security Note
• https://osv.dev/vulnerability/GHSA-ff5c-56m7-vc75 · Vendor Advisory
• https://github.com/open-webui/open-webui · Note
• https://github.com/open-webui/open-webui/commit/613a087387c094e71ee91d29c015195ef401e160 · Note
• https://twitter.com/CVEnew/status/1902968869045829899 · Twitter Post
• https://huntr.com/bounties/a3b1a4b7-c723-496d-842c-844cc0988fe9 · Note