CVE-2026-44565: Open WebUI Arbitrary File Write and Delete via Path Traversal Vulnerability
Summary
CVE-2026-44565: Open WebUI Arbitrary File Write, Delete via Path Traversal. Affects open-webui versions < 0.6.10. Fixed in 0.6.10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Open WebUI, formerly known as Ollama WebUI, is a web-based interface designed for managing and interacting with various models and applications. It allows users to upload files, such as audio files, for processing. However, a critical vulnerability exists in version 0.1.105 that permits unauthorized file uploads to arbitrary locations on the server's filesystem, posing significant security risks.
Vulnerability Detail
The vulnerability arises from an improper limitation of a pathname, allowing attackers to exploit a path traversal flaw. When users upload files through the Open WebUI interface, the application does not validate or sanitize the filenames. This oversight enables attackers to craft filenames that include dot-segments, allowing them to traverse out of the designated upload directory. As a result, attackers can upload files to any location on the server where the web server user has write permissions. This can lead to unauthorized file creation, overwriting existing files, and potentially executing malicious code. The vulnerability is classified under CWE-22 and has a CVSS score of 8.1, indicating a high severity level.
How To Fix
Latest published version: 0.12.3 as of 22 Oct 2026
pip install --upgrade "open-webui==0.12.3"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.6.10
This is the first release that contains the fix.
pip install --upgrade "open-webui==0.6.10"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict file uploads by implementing additional validation checks on the server-side to ensure that uploaded filenames do not contain any path traversal characters (e.g., '../'). This can help mitigate the risk until the package is updated.
Conclusion
The Open WebUI vulnerability CVE-2026-44565 poses a significant risk due to improper file upload handling, allowing attackers to exploit path traversal. Users are strongly advised to update to the patched version 0.6.10 or later and implement additional validation measures to secure their applications.
See every vulnerability recorded for open-webui →
FAQ
The vulnerability allows attackers to upload files to arbitrary locations on the server, potentially leading to data loss, unauthorized access, or execution of malicious code.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If an immediate update is not possible, implement server-side validation to restrict file uploads and prevent path traversal attacks.
Signs of compromise may include unexpected file changes, unauthorized access logs, or unusual server behavior. Regular monitoring and auditing are recommended.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities in your software using just the Pipfile.lock.
Related vulnerabilities
Recent vulnerabilities recorded for open-webui.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
