CVE-2024-30256: Openwebui Open Webui

Medium severity, CVSS 6.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Open WebUI is a user-friendly WebUI for LLMs. Open-webui is vulnerable to authenticated blind server-side request forgery. This vulnerability is fixed in 0.1.117.

Affected products

• Openwebui Open Webui: before 0.1.117 (fixed in 0.1.117)

Published 2024-04-16. Last modified 2026-06-17.