PT-2026-39282 · Unknown · Open-Webui

CVE-2026-44566 · Published 2024-03-12 · Updated 2026-07-13

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.1.124

Description An issue exists in the self-hosted artificial intelligence platform where the application fails to validate or sanitize the filename during file uploads. When attaching files to a prompt via the '/rag/api/v1/doc' API endpoint, the system derives the filename from the original HTTP upload request. This allows users to include dot-segments in the file path to perform path traversal, enabling the upload of files to arbitrary locations on the filesystem where the web server user has permissions. This can be exploited to upload malicious models or overwrite critical system files, such as SSH authorized keys.

Recommendations Update to version 0.1.124.

Exploit

Fix

Unrestricted File Upload

Path traversal

Weakness Enumeration

CWE-434

CWE-22

Related Identifiers

BDU:2026-09526

CVE-2026-44566

GHSA-9PGH-J74G-QJ6M

PYSEC-2026-2717

Affected Products

Open-Webui

References · 14

• 🔥 https://github.com/open-webui/open-webui/security/advisories/GHSA-9pgh-j74g-qj6m · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44566.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-44566 · Security Note
• https://osv.dev/vulnerability/CVE-2026-44566 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9pgh-j74g-qj6m · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-2717 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-09526 · Security Note
• https://github.com/open-webui/open-webui · Note
• https://t.me/cveNotify/164105 · Telegram Post
• https://t.me/CVEtracker/53968 · Telegram Post
• https://pypi.org/project/open-webui · Note
• https://github.com/advisories/GHSA-9pgh-j74g-qj6m · Note
• https://twitter.com/CVEnew/status/2055457509758976044 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2055498001833939422 · Twitter Post