CVE-2025-63681: open-webui Vulnerable to Incorrect Access Control
Summary
CVE-2025-63681: open-webui is Vulnerable to Incorrect Access Control. Affects open-webui versions < 0.6.33. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
open-webui is an open-source web user interface designed for managing and interacting with large language models (LLMs). It provides users with a streamlined way to initiate, monitor, and control various tasks related to LLM responses. The package is widely used in applications requiring natural language processing capabilities. However, version 0.6.33 of open-webui has been identified to have a critical vulnerability that allows unauthorized access to task management functionalities.
Vulnerability Detail
The vulnerability in open-webui arises from incorrect access control mechanisms in the API endpoint /api/tasks/stop/. This endpoint allows users to cancel tasks without verifying their ownership, which means that any authenticated user can terminate any ongoing task initiated by any other user. This flaw can lead to denial of service for legitimate users and can be exploited by attackers to disrupt services or manipulate task outcomes.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, restrict access to the /api/tasks/stop/ endpoint by implementing additional authentication checks or by disabling the endpoint until the package can be updated.
Conclusion
In summary, CVE-2025-63681 presents a significant risk to users of the open-webui package due to its incorrect access control mechanisms. It is crucial for users to update to a patched version to mitigate the risk of unauthorized task cancellation. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for open-webui →
FAQ
CVE-2025-63681 is a vulnerability in the open-webui package that allows unauthorized users to cancel tasks without ownership verification.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
The vulnerability can lead to denial of service for legitimate users and can be exploited to disrupt ongoing tasks, potentially affecting application performance.
Yes, a patch is available in versions of open-webui released after 0.6.33. Users should upgrade to a version higher than 0.6.33.
If an immediate upgrade is not possible, consider implementing additional access controls or temporarily disabling the vulnerable endpoint.
Related vulnerabilities
Recent vulnerabilities recorded for open-webui.
