CVE-2025-63391 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An authentication bypass vulnerability exists in Open-WebUI
High CVSS: 7.5

CVE-2025-63391

An authentication bypass vulnerability exists in Open-WebUI <=0.6.32 in the /api/config endpoint. The endpoint lacks proper authentication and authorization controls, exposing sensitive system configuration data to unauthenticated remote attackers.
Vendor
Openwebui
Product
Open Webui
CWE
CWE-306
Yayın Tarihi
2025-12-18 16:15:54
Güncelleme
2026-01-22 18:16:44
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-306 Open Webui HIGH Openwebui 2025

Referanslar

https://gist.github.com/Cristliu/13c41b97285b776275bc8bfd3504e51b https://gist.github.com/Cristliu/889471313b3c698fff74d32b7717807c https://github.com/open-webui/open-webui/issues