https://vulnerability.circl.lu/sightings/feed 2026-09-10T21:18:10.904206+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/e3c40a60-9619-4644-bd83-33f01ba00e9d/export 2026-09-10T21:18:10.927023+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e3c40a60-9619-4644-bd83-33f01ba00e9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88002", "type": "seen", "source": "https://gist.github.com/alon710/401536538bb41a7576b21df62b940fb2", "content": "# CVE-2026-88002: CVE-2026-88002: Infinite Loop Denial of Service in Open WebUI Chat History Reconstruction\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-09-09\n> **Full Report:** https://cvereports.com/reports/CVE-2026-88002\n\n## Summary\nAn infinite loop vulnerability (CWE-835) in Open WebUI versions 0.5.0 through 0.11.0 allows authenticated attackers to cause a complete and persistent Denial of Service (DoS) of the backend. By submitting a specially crafted chat history containing cyclic message references that omit internal message identifiers, the cycle detection mechanism is bypassed. This triggers an infinite synchronous traversal that blocks the single-threaded asyncio event loop and exhausts system memory, causing the application to crash.\n\n## TL;DR\nAuthenticated users can trigger a persistent infinite loop in the Open WebUI backend, completely freezing the server and exhausting host memory by saving a cyclic chat history.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-835\n- **Attack Vector**: Network (AV:N)\n- **Privileges Required**: Low (PR:L)\n- **User Interaction**: None (UI:N)\n- **Availability Impact**: High (A:H)\n- **Exploit Status**: Proof of Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Open WebUI\n- **open-webui**: >= 0.5.0, < 0.11.1 (Fixed in: `0.11.1`)\n\n## Mitigation\n\n- Upgrade to version 0.11.1 or higher\n- Manually hotpatch backend/open_webui/utils/misc.py\n- Audit database for cyclic chat message references\n\n**Remediation Steps:**\n1. Stop the running Open WebUI service\n2. Pull the updated Docker image for version 0.11.1\n3. Run database queries to identify and purge any malformed chat history rows\n4. Start the service with the patched software version\n\n## References\n\n- [GitHub Security Advisory GHSA-jqhh-cjmq-vmv6](https://github.com/open-webui/open-webui/security/advisories/GHSA-jqhh-cjmq-vmv6)\n- [Pull Request #28034: Fix infinite loop](https://github.com/open-webui/open-webui/pull/28034)\n- [Commit 5c79ccc9e5c9efc2bc024d8f0b9757652ece929a](https://github.com/open-webui/open-webui/commit/5c79ccc9e5c9efc2bc024d8f0b9757652ece929a)\n- [Release v0.11.1](https://github.com/open-webui/open-webui/releases/tag/v0.11.1)\n- [CVE Record CVE-2026-88002](https://www.cve.org/CVERecord?id=CVE-2026-88002)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-88002) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-10T02:31:55.689088Z"} 2026-09-10T02:31:55.689088+00:00 https://vulnerability.circl.lu/sighting/888c126d-cf2b-40dd-a51c-eba71b7aa920/export 2026-09-10T21:18:10.928621+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "888c126d-cf2b-40dd-a51c-eba71b7aa920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88002", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-jqhh-cjmq-vmv6", "content": "", "creation_timestamp": "2026-09-10T00:35:06.841952Z"} 2026-09-10T00:35:06.841952+00:00