PT-2026-39282 · Unknown · Open-Webui

Published 2026-05-08 · Updated 2026-05-19 · CVE-2026-44566

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.1.124

Description An issue exists in the self-hosted artificial intelligence platform where the application fails to validate or sanitize the filename during file uploads. When attaching files to a prompt via the '/rag/api/v1/doc' API endpoint, the system derives the filename from the original HTTP upload request. This allows users to include dot-segments in the file path to perform path traversal, enabling the upload of files to arbitrary locations on the filesystem where the web server user has permissions. This can be exploited to upload malicious models or overwrite critical system files, such as SSH authorized keys.

Recommendations Update to version 0.1.124.

Exploit

Fix

Unrestricted File Upload

Path traversal

Weakness Enumeration

CWE-434

CWE-22

Related Identifiers

CVE-2026-44566

GHSA-9PGH-J74G-QJ6M

Affected Products

Open-Webui

References · 8

• 🔥 https://github.com/open-webui/open-webui/security/advisories/GHSA-9pgh-j74g-qj6m · Exploit
• https://osv.dev/vulnerability/GHSA-9pgh-j74g-qj6m · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44566 · Security Note
• https://github.com/open-webui/open-webui · Note
• https://twitter.com/VulmonFeeds/status/2055498001833939422 · Twitter Post
• https://twitter.com/CVEnew/status/2055457509758976044 · Twitter Post
• https://t.me/cveNotify/164105 · Telegram Post
• https://t.me/CVEtracker/53968 · Telegram Post