CVE-2026-44565: Open WebUI Path Traversal Vulnerability Leading to Arbitrary File Write and Delete
Summary
CVE-2026-44565: Open WebUI Arbitrary File Write, Delete via Path Traversal. Affects open-webui versions < 0.6.10. Fixed in 0.6.10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Open WebUI, formerly known as Ollama WebUI, is an interactive web interface designed for managing and utilizing machine learning models. It allows users to upload files, such as audio files, for processing and transcription. However, a critical vulnerability exists in version 0.1.105 that allows attackers to exploit the file upload functionality, leading to unauthorized file access and manipulation on the server's filesystem.
Vulnerability Detail
The vulnerability arises from improper validation of file paths during the upload process. Attackers can exploit this flaw by uploading files with specially crafted names that include dot-segments, allowing them to traverse the directory structure and write files to arbitrary locations on the server. This can lead to the deletion of important files, as the application attempts to remove the uploaded file after processing. The lack of proper sanitization and validation of the file path poses significant risks, including data loss and potential system compromise.
How To Fix
Latest published version: 0.12.3 as of 22 Oct 2026
pip install --upgrade "open-webui==0.12.3"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.6.10
This is the first release that contains the fix.
pip install --upgrade "open-webui==0.6.10"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can manually restrict file uploads by implementing server-side checks to validate the file paths and prevent traversal attacks. This can be done by ensuring that uploaded filenames do not contain any '../' sequences.
Conclusion
The Open WebUI vulnerability (CVE-2026-44565) presents a significant risk due to improper file path validation, allowing attackers to manipulate the server's filesystem. Users are strongly advised to upgrade to the patched version to mitigate this risk and ensure the security of their applications.
See every vulnerability recorded for open-webui →
FAQ
The vulnerability allows attackers to upload files to arbitrary locations on the server, potentially leading to data loss and unauthorized access to sensitive files.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The CVSS score of this vulnerability is 8.1, indicating a high severity level.
Yes, a patch is available in version 0.6.10 of Open WebUI. It is recommended to upgrade to this version or later.
If immediate upgrading is not possible, implement server-side checks to validate file paths and restrict uploads to prevent exploitation of the vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for open-webui.
