AI agent vulnerability · Open WebUI

CVE-2024-7034: Withdrawn Advisory: Open WebUI Allows Arbitrary File Write via the `/models/upload` Endpoint

mediumCVSS 3.0 6.5GHSA-crh6-pj8c-xrhc

This advisory was withdrawn on Sep 2, 2026. The publisher no longer considers it a valid vulnerability.

Withdrawn Advisory This advisory has been withdrawn because it does not describe a valid vulnerability. This link is maintained to preserve external references. Original Description In open-webui version 0.3.8, the endpoint /models/upload is vulnerable to arbitrary file write due to improper handling of user-supplied filenames.

Published Mar 20, 2025 · Updated Sep 2, 2026

Affected packages

open-webui

Ecosystem: PyPI
Affected: <= 0.3.8
Fixed in: No patched version yet
Check: pip show open-webui

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Withdrawn Advisory

This advisory has been withdrawn because it does not describe a valid vulnerability. This link is maintained to preserve external references.

Original Description

In open-webui version 0.3.8, the endpoint /models/upload is vulnerable to arbitrary file write due to improper handling of user-supplied filenames. The vulnerability arises from the usage of file_path = f"{UPLOAD_DIR}/{file.filename}" without proper input validation or sanitization. An attacker can exploit this by manipulating the file.filename parameter to include directory traversal sequences, causing the resulting file_path to escape the intended UPLOAD_DIR and potentially overwrite arbitrary files on the system. This can lead to unauthorized modifications of system binaries, configuration files, or sensitive data, potentially enabling remote command execution.

Credited to Classic298.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Open WebUI vulnerabilities

All Open WebUI entries