{"vulnerability": "CVE-2026-8800", "sightings": [{"uuid": "39ece742-6058-4086-807f-e7fee4f406c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8800", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq672ajzyi2z", "content": "CVE-2026-8800 - Cross-Org External Token Metadata accessible to AuditUser role\nCVE ID : CVE-2026-8800\n \n Published : July 8, 2026, 8:17 p.m. | 43\u00a0minutes ago\n \n Description : Incorrect Authorization vulnerability in Progress MOVEit Transfer (Audit User module).\n\nThis issue aff...", "creation_timestamp": "2026-07-08T22:44:35.648743Z"}, {"uuid": "c69a6e42-8c9b-42bb-93c1-2812b226b8c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88000", "type": "seen", "source": "https://gist.github.com/alon710/48cdccd93c734ae28b1351fbe3368bd9", "content": "# CVE-2026-88000: CVE-2026-88000: Denial of Service via Infinite Loop in Open WebUI Chat History Deletion\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-09-09\n> **Full Report:** https://cvereports.com/reports/CVE-2026-88000\n\n## Summary\nAn authenticated denial-of-service vulnerability exists in Open WebUI versions 0.10.0 up to 0.11.0. By uploading a malformed chat history containing cyclical child message references and requesting a message deletion, an attacker can trigger an infinite loop. Since Open WebUI relies on Python's single-threaded asyncio event loop, the CPU-bound loop blocks all incoming connections, freezing the service for all users.\n\n## TL;DR\nAn authenticated user can permanently freeze an Open WebUI server by creating a circular message reference and initiating a deletion, causing an infinite CPU-bound loop that blocks the application's single asyncio thread.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-835\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 6.5\n- **EPSS Score**: Not available\n- **Impact**: High Availability Impact (Complete Denial of Service)\n- **Exploit Status**: Proof of Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Self-hosted Open WebUI installations utilizing message history APIs\n- **open-webui**: >= 0.10.0, < 0.11.1 (Fixed in: `0.11.1`)\n\n## Mitigation\n\n- Upgrade to version 0.11.1 or later\n- Restrict user registration to trusted identities\n- Implement API rate limiting on chat management endpoints\n- Configure process health monitors to auto-restart frozen containers\n\n**Remediation Steps:**\n1. Pull the latest secure Docker image using: docker pull ghcr.io/open-webui/open-webui:main\n2. Stop the existing container deployment.\n3. Remove the vulnerable container instance while keeping the persistent data volumes.\n4. Recreate and run the container with the updated image release.\n5. Verify the software version in the administrative control panel.\n\n## References\n\n- [GitHub Security Advisory GHSA-3cgp-3cqx-j8w2](https://github.com/open-webui/open-webui/security/advisories/GHSA-3cgp-3cqx-j8w2)\n- [Fix Commit b933292d63d12be3fd1416fe55519ddc7aa336bc](https://github.com/open-webui/open-webui/commit/b933292d63d12be3fd1416fe55519ddc7aa336bc)\n- [Pull Request #28035](https://github.com/open-webui/open-webui/pull/28035)\n- [Release Notes v0.11.1](https://github.com/open-webui/open-webui/releases/tag/v0.11.1)\n- [CVE-2026-88000 Record](https://www.cve.org/CVERecord?id=CVE-2026-88000)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-88000) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-10T00:32:33.568916Z"}, {"uuid": "34593a65-dc16-48bd-963c-669ad886d3bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88000", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-3cgp-3cqx-j8w2", "content": "", "creation_timestamp": "2026-09-10T00:35:02.509223Z"}, {"uuid": "e64a2466-210a-49b1-b5f9-e029e9c71d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88001", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-5x7x-4c3c-qf5w", "content": "", "creation_timestamp": "2026-09-10T00:35:04.669645Z"}, {"uuid": "888c126d-cf2b-40dd-a51c-eba71b7aa920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88002", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-jqhh-cjmq-vmv6", "content": "", "creation_timestamp": "2026-09-10T00:35:06.841952Z"}, {"uuid": "f73e360e-d605-4db2-bfc7-fa37665513c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88001", "type": "seen", "source": "https://gist.github.com/alon710/855b51c2ea136c7c49beab7d27d1ef40", "content": "# CVE-2026-88001: CVE-2026-88001: Server-Side Request Forgery via Redirect Bypass in Open WebUI\n\n> **CVSS Score:** 5.0\n> **Published:** 2026-09-09\n> **Full Report:** https://cvereports.com/reports/CVE-2026-88001\n\n## Summary\nServer-Side Request Forgery (SSRF) vulnerability in Open WebUI (v0.9.5 to v0.11.1) allows authenticated users to bypass private IP and host filter lists by abusing HTTP redirect handling or using IP literals with the aiohttp client.\n\n## TL;DR\nAn SSRF vulnerability in Open WebUI allows authenticated attackers to bypass network access controls and fetch internal resources or cloud metadata via crafted redirects and direct IP literals.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 5.0\n- **Impact**: Low Confidentiality / Information Disclosure\n- **Exploit Status**: Proof of Concept (PoC)\n- **CISA KEV Status**: Not Listed\n- **Ransomware Use**: No Known Association\n\n## Affected Systems\n\n- Open WebUI v0.9.5 through v0.11.0 deployments\n- **open-webui**: >= 0.9.5, < 0.11.1 (Fixed in: `v0.11.1`)\n\n## Mitigation\n\n- Upgrade Open WebUI to version v0.11.1 or higher.\n- Ensure destination-level filtering is offloaded to the egress gateway when operating behind a forward proxy.\n- Disable local web fetching by verifying that ENABLE_LOCAL_WEB_FETCH is set to False.\n\n**Remediation Steps:**\n1. Identify current running version of Open WebUI.\n2. Pull the latest Docker image: docker pull ghcr.io/open-webui/open-webui:main\n3. Restart the container using the updated image.\n4. Verify that the version matches v0.11.1 or higher.\n5. If using an external forward proxy, update its egress access control list to explicitly block private ranges (RFC 1918, RFC 1122, loopback) and metadata IP 169.254.169.254.\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-88001) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-10T01:32:33.286595Z"}, {"uuid": "e3c40a60-9619-4644-bd83-33f01ba00e9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88002", "type": "seen", "source": "https://gist.github.com/alon710/401536538bb41a7576b21df62b940fb2", "content": "# CVE-2026-88002: CVE-2026-88002: Infinite Loop Denial of Service in Open WebUI Chat History Reconstruction\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-09-09\n> **Full Report:** https://cvereports.com/reports/CVE-2026-88002\n\n## Summary\nAn infinite loop vulnerability (CWE-835) in Open WebUI versions 0.5.0 through 0.11.0 allows authenticated attackers to cause a complete and persistent Denial of Service (DoS) of the backend. By submitting a specially crafted chat history containing cyclic message references that omit internal message identifiers, the cycle detection mechanism is bypassed. This triggers an infinite synchronous traversal that blocks the single-threaded asyncio event loop and exhausts system memory, causing the application to crash.\n\n## TL;DR\nAuthenticated users can trigger a persistent infinite loop in the Open WebUI backend, completely freezing the server and exhausting host memory by saving a cyclic chat history.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-835\n- **Attack Vector**: Network (AV:N)\n- **Privileges Required**: Low (PR:L)\n- **User Interaction**: None (UI:N)\n- **Availability Impact**: High (A:H)\n- **Exploit Status**: Proof of Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Open WebUI\n- **open-webui**: >= 0.5.0, < 0.11.1 (Fixed in: `0.11.1`)\n\n## Mitigation\n\n- Upgrade to version 0.11.1 or higher\n- Manually hotpatch backend/open_webui/utils/misc.py\n- Audit database for cyclic chat message references\n\n**Remediation Steps:**\n1. Stop the running Open WebUI service\n2. Pull the updated Docker image for version 0.11.1\n3. Run database queries to identify and purge any malformed chat history rows\n4. Start the service with the patched software version\n\n## References\n\n- [GitHub Security Advisory GHSA-jqhh-cjmq-vmv6](https://github.com/open-webui/open-webui/security/advisories/GHSA-jqhh-cjmq-vmv6)\n- [Pull Request #28034: Fix infinite loop](https://github.com/open-webui/open-webui/pull/28034)\n- [Commit 5c79ccc9e5c9efc2bc024d8f0b9757652ece929a](https://github.com/open-webui/open-webui/commit/5c79ccc9e5c9efc2bc024d8f0b9757652ece929a)\n- [Release v0.11.1](https://github.com/open-webui/open-webui/releases/tag/v0.11.1)\n- [CVE Record CVE-2026-88002](https://www.cve.org/CVERecord?id=CVE-2026-88002)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-88002) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-10T02:31:55.689088Z"}, {"uuid": "d20311ce-bd0a-42b4-9301-9c057249de2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88007", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6fq2ll6y25", "content": "CVE-2026-88007 - traefik\nIf you run Traefik versions before the updates listed and use HTTP/3 with a backend that requires NTLM or Negotiate authentication, a different client could piggy\u2011back on an existing\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#traefik #CVE #infosec", "creation_timestamp": "2026-09-10T15:50:08.590514Z"}, {"uuid": "8e36f277-45fa-42a3-a64d-cb7f2958d59e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88007", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gs6jehs2t", "content": "\ud83d\udea8 CVE-2026-88007 \u2014 CVSS 9.1 CRITICAL\n\nTraefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 and 3.7.13, the H...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88007\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:09:13.409926Z"}]}