AI agent vulnerability · Open WebUI

CVE-2025-15603: Withdrawn Advisory: Open WebUI JWT Key Handler

lowCVSS 4.0 2.9 · 3.1 3.7GHSA-2rf6-9rc8-rqch

This advisory was withdrawn on Sep 2, 2026. The publisher no longer considers it a valid vulnerability.

Withdrawn Advisory This advisory has been withdrawn because it does not describe a valid vulnerability. This link is maintained to preserve external references. Original Description A security vulnerability has been detected in open-webui up to 0.6.16. Affected is an unknown function of the file backend/startwindows.bat of the component JWT Key Handler.

Published Mar 9, 2026 · Updated Sep 2, 2026

Affected packages

open-webui

Ecosystem: PyPI
Affected: <= 0.6.16
Fixed in: No patched version yet
Check: pip show open-webui

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Withdrawn Advisory

This advisory has been withdrawn because it does not describe a valid vulnerability. This link is maintained to preserve external references.

Original Description

A security vulnerability has been detected in open-webui up to 0.6.16. Affected is an unknown function of the file backend/start_windows.bat of the component JWT Key Handler. Such manipulation of the argument WEBUI_SECRET_KEY leads to insufficiently random values. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitability is told to be difficult. The exploit has been disclosed publicly and may be used.

Credited to Classic298.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Open WebUI vulnerabilities

All Open WebUI entries