Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · Open WebUI

CVE-2024-7806: Open WebUI Cross-Site Request Forgery (CSRF) Vulnerability

highCVSS 3.0 8.0GHSA-85jc-8h5p-8vw8

A vulnerability in open-webui/open-webui versions <= 0.3.8 allows remote code execution by non-admin users via Cross-Site Request Forgery (CSRF). The application uses cookies with the SameSite attribute set to lax for authentication and lacks CSRF tokens.

Published Mar 20, 2025 · Updated Mar 21, 2025

Affected packages

open-webui

Ecosystem
PyPI
Affected
< 0.3.33
Fixed in
0.3.33
Check
pip show open-webui

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

A vulnerability in open-webui/open-webui versions <= 0.3.8 allows remote code execution by non-admin users via Cross-Site Request Forgery (CSRF). The application uses cookies with the SameSite attribute set to lax for authentication and lacks CSRF tokens. This allows an attacker to craft a malicious HTML that, when accessed by a victim, can modify the Python code of an existing pipeline and execute arbitrary code with the victim's privileges.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Open WebUI vulnerabilities

All Open WebUI entries