AI agent vulnerability · Open WebUI

CVE-2024-8060: Open WebUI allows Remote Code Execution via Arbitrary File Upload to /audio/api/v1/transcriptions

highCVSS 3.0 8.1GHSA-ff5c-56m7-vc75

OpenWebUI version 0.3.0 contains a vulnerability in the audio API endpoint /audio/api/v1/transcriptions that allows for arbitrary file upload. The application performs insufficient validation on the file.contenttype and allows user-controlled filenames, leading to a path traversal vulnerability.

Published Mar 20, 2025 · Updated Oct 15, 2025

Affected packages

open-webui

Ecosystem: PyPI
Affected: < 0.5.17
Fixed in: 0.5.17
Check: pip show open-webui

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

OpenWebUI version 0.3.0 contains a vulnerability in the audio API endpoint /audio/api/v1/transcriptions that allows for arbitrary file upload. The application performs insufficient validation on the file.content_type and allows user-controlled filenames, leading to a path traversal vulnerability. This can be exploited by an authenticated user to overwrite critical files within the Docker container, potentially leading to remote code execution as the root user.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Open WebUI vulnerabilities

All Open WebUI entries