{"vulnerability": "CVE-2026-88000", "sightings": [{"uuid": "c69a6e42-8c9b-42bb-93c1-2812b226b8c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88000", "type": "seen", "source": "https://gist.github.com/alon710/48cdccd93c734ae28b1351fbe3368bd9", "content": "# CVE-2026-88000: CVE-2026-88000: Denial of Service via Infinite Loop in Open WebUI Chat History Deletion\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-09-09\n> **Full Report:** https://cvereports.com/reports/CVE-2026-88000\n\n## Summary\nAn authenticated denial-of-service vulnerability exists in Open WebUI versions 0.10.0 up to 0.11.0. By uploading a malformed chat history containing cyclical child message references and requesting a message deletion, an attacker can trigger an infinite loop. Since Open WebUI relies on Python's single-threaded asyncio event loop, the CPU-bound loop blocks all incoming connections, freezing the service for all users.\n\n## TL;DR\nAn authenticated user can permanently freeze an Open WebUI server by creating a circular message reference and initiating a deletion, causing an infinite CPU-bound loop that blocks the application's single asyncio thread.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-835\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 6.5\n- **EPSS Score**: Not available\n- **Impact**: High Availability Impact (Complete Denial of Service)\n- **Exploit Status**: Proof of Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Self-hosted Open WebUI installations utilizing message history APIs\n- **open-webui**: >= 0.10.0, < 0.11.1 (Fixed in: `0.11.1`)\n\n## Mitigation\n\n- Upgrade to version 0.11.1 or later\n- Restrict user registration to trusted identities\n- Implement API rate limiting on chat management endpoints\n- Configure process health monitors to auto-restart frozen containers\n\n**Remediation Steps:**\n1. Pull the latest secure Docker image using: docker pull ghcr.io/open-webui/open-webui:main\n2. Stop the existing container deployment.\n3. Remove the vulnerable container instance while keeping the persistent data volumes.\n4. Recreate and run the container with the updated image release.\n5. Verify the software version in the administrative control panel.\n\n## References\n\n- [GitHub Security Advisory GHSA-3cgp-3cqx-j8w2](https://github.com/open-webui/open-webui/security/advisories/GHSA-3cgp-3cqx-j8w2)\n- [Fix Commit b933292d63d12be3fd1416fe55519ddc7aa336bc](https://github.com/open-webui/open-webui/commit/b933292d63d12be3fd1416fe55519ddc7aa336bc)\n- [Pull Request #28035](https://github.com/open-webui/open-webui/pull/28035)\n- [Release Notes v0.11.1](https://github.com/open-webui/open-webui/releases/tag/v0.11.1)\n- [CVE-2026-88000 Record](https://www.cve.org/CVERecord?id=CVE-2026-88000)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-88000) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-10T00:32:33.568916Z"}, {"uuid": "34593a65-dc16-48bd-963c-669ad886d3bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88000", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-3cgp-3cqx-j8w2", "content": "", "creation_timestamp": "2026-09-10T00:35:02.509223Z"}]}