Vulnerability library
Security checkApril 01, 2025

Open WebUI Uncontrolled Resource Consumption vulnerability - open-webui

Understand the exposure, see the recommended fix, and check whether your own website has related weaknesses.

High severitynpmopen-webui

Check your website

Find this and other vulnerabilities with a free scan.

Your scan runs on your computer. No account required.

Description

In version 0.3.32 of open-webui/open-webui, the absence of authentication mechanisms allows any unauthenticated attacker to access the api/v1/utils/code/format endpoint. If a malicious actor sends a POST request with an excessively high volume of content, the server could become completely unresponsive.

Recommendation

No fix is available yet. Followings are affected versions:

  • <= 0.3.32

References

Could your website be exposed too?

SmartScanner can check your website for Open WebUI Uncontrolled Resource Consumption vulnerability - open-webui and gives you actionable findings to investigate.

Start a free scan

Related Issues

You might also like:

Exploiting Server Version Disclosure

How do hackers hack websites?

CSRF, XXE, and 12 Other Security Acronyms Explained

See something that needs correcting? Let us knowUpdated April 01, 2025