PT-2026-39670 · Unknown · Open-Webui

Published 2026-05-11 · Updated 2026-05-16 · CVE-2026-44565

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.6.10

Description An issue exists where the application does not validate or sanitize the filename of uploaded audio files, deriving it directly from the original HTTP upload request. This allows users to include dot-segments in the file path to perform path traversal, enabling them to upload files to arbitrary locations on the filesystem where the web server user has permissions. Specifically, the '/ollama/models/upload' endpoint is affected. Because the application temporarily writes the file to disk before sending it to another API and then deletes it, this can result in the overwriting and subsequent deletion of existing files on the server.

Recommendations Update to version 0.6.10. As a temporary workaround, restrict access to the '/ollama/models/upload' endpoint to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-44565

GHSA-J3FW-WC48-29G3

Affected Products

Open-Webui

References · 6

• 🔥 https://github.com/open-webui/open-webui/security/advisories/GHSA-j3fw-wc48-29g3 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-44565 · Security Note
• https://osv.dev/vulnerability/GHSA-j3fw-wc48-29g3 · Vendor Advisory
• https://github.com/open-webui/open-webui · Note
• https://twitter.com/CVEnew/status/2055457488426729951 · Twitter Post
• https://t.me/CSIRT_italia/3508 · Telegram Post