CVE-2026-29071: open-webui
CVSS: 4.3v3.1MediumAnalyzed
AliasesGHSA-w9f8-gxf9-rhvwPYSEC-2026-2765
Published 26-03-2026Last modified 27-03-2026
Vulnerability summary
CVE-2026-29071 is a medium (CVSS 4.3) vulnerability in open-webui. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 17.3% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
4.3/10
010
Medium · v3.1 (NVD)EPSS score
0.27%
0%100%
Low · +0.01 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1github
Timeline
- 26-03-2026PublishedVulnerability first disclosed.
- 27-03-2026Last modifiedVulnerability information updated.
Description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.8.6, any authenticated user can read other users' private memories via `/api/v1/retrieval/query/collection`. Version 0.8.6 patches the issue.
CVSS metrics
3 scores · 3 sources · 1 versionMedium 4.3Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NSources3 sources · 3.1–4.3
- CVE.orgCNA3.1LowCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:NDiffers
- OSV · PypiEcosystem advisory · calculated3.1LowCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:NDiffers
EPSS trend
Probability
0.27%
Chance of exploitation in the next 30 days
Percentile
17%
Versus all other CVEs
30-day change
+0.01 pp
From 0.25% on 21-09-2026
21-09-202621-10-2026
EPSS score0.27%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundOpen Webui
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Open-webui1 product
- open-webui< 0.8.6
Openwebui1 product
- open_webui< 0.8.6
PyPI1 product
- open-webui< 0.8.6
3 vendors · 3 products
References
5 links- github.com/open-webui/open-webui/security/advisories/GHSA-w9f8-gxf9-rhvwX Refsource CONFIRMWEBExploitVendor Advisory
- pypi.org/project/open-webuiPACKAGE