{"cve":"CVE-2026-44566","nvd":{"published":"2026-05-15T22:16:52.920","modified":"2026-06-17T10:50:48.270","status":"Analyzed","description":"Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.1.124, when attaching files to a promp, the name of the file is derived from the original HTTP upload request and is not validated or sanitized. This allows for users to upload files with names containing dot-segments in the file path and traverse out of the intended uploads directory. Effectively, users can upload files anywhere on the filesystem the user running the web server has permission. This vulnerability is fixed in 0.1.124.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8},"cwes":["CWE-22","CWE-434"],"references":["https://github.com/open-webui/open-webui/security/advisories/GHSA-9pgh-j74g-qj6m","https://github.com/open-webui/open-webui/security/advisories/GHSA-9pgh-j74g-qj6m"],"products":["openwebui:open_webui"],"source":"nvd","synced_at":"2026-10-19T22:35:16.954578616+00:00"},"epss":{"cve":"CVE-2026-44566","score":0.00336,"percentile":0.27079,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-9pgh-j74g-qj6m","url":"https://osv.dev/vulnerability/GHSA-9pgh-j74g-qj6m","summary":"Open WebUI Vulnerable to Arbitrary File Upload and Path Traversal","modified":"2026-07-13T16:43:22.888985225Z","packages":[{"ecosystem":"PyPI","name":"open-webui","purl":"pkg:pypi/open-webui","ranges":["<0.1.124"],"fixed":["0.1.124"]}]},{"id":"PYSEC-2026-2717","url":"https://osv.dev/vulnerability/PYSEC-2026-2717","summary":"Open WebUI Vulnerable to Arbitrary File Upload and Path Traversal","modified":"2026-07-13T16:32:18.790803683Z","packages":[{"ecosystem":"PyPI","name":"open-webui","purl":"pkg:pypi/open-webui","ranges":["<0.1.124"],"fixed":["0.1.124"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}