A vulnerability in open-webui/open-webui versions <= 0.3.8 allows remote code execution by non-admin users via Cross-Site Request Forgery (CSRF). The application uses cookies with the SameSite attribute set to lax for authentication and lacks CSRF tokens. This allows an attacker to craft a malicious HTML that, when accessed by a victim, can modify the Python code of an existing pipeline and execute arbitrary code with the victim's privileges.
References
| Link | Resource |
|---|---|
| https://huntr.com/bounties/9350a68d-5f33-4b3d-988b-81e778160ab8 | Exploit Third Party Advisory |
| https://huntr.com/bounties/9350a68d-5f33-4b3d-988b-81e778160ab8 | Exploit Third Party Advisory |
Configurations
History
26 Mar 2025, 16:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://huntr.com/bounties/9350a68d-5f33-4b3d-988b-81e778160ab8 - Exploit, Third Party Advisory | |
| First Time |
Openwebui
Openwebui open Webui |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| CPE | cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:* |
20 Mar 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
20 Mar 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-20 10:15
Updated : 2025-03-26 16:46
NVD link : CVE-2024-7806
Mitre link : CVE-2024-7806
JSON object : View
Products Affected
openwebui
- open_webui
CWE
No CWE.