Know what to patch next.

Published open-source security advisories, matched to the exact versions you run.

Run in a terminal

$ claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext

Your browser opens: sign in and choose what the agent may read.

Then ask: What do I need to patch on this machine?

New: 972 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 1,080 in the 30 days before.
Critical: 67 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.

Exploited: 132 All actionable advisories, of any publish date, that CISA's Known Exploited Vulnerabilities catalog confirms are exploited in the wild, within the selected severities. Show them in the feed.

Advisories per daypartial

Actionable

6376–6400 of 30,985 matching · newest first

ExploitedClear filters

High, CVSS 8.814 May 2026
Open WebUI: Jupyter code execution works despite ENABLE_CODE_EXECUTION=false — feature gate bypassed
PyPI open-webui · Upgrade to 0.8.12 or later · <= 0.8.11 · CVE-2026-45672 · GHSA-482j-2pq6-q5w4 · amended
14 May 2026Evidence →
High, CVSS 8.014 May 2026
Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-45671 · GHSA-26g9-27vm-x3q8 · amended
14 May 2026Evidence →
Medium, CVSS 6.514 May 2026
Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)
PyPI open-webui · Upgrade to 0.8.0 or later · <= 0.7.2 · CVE-2026-45667 · GHSA-m69w-p7m4-585j · amended
14 May 2026Evidence →
Medium, CVSS 6.514 May 2026
Open WebUI has an Indirect Object Reference (IDOR) in user notes
PyPI open-webui · Upgrade to 0.8.11 or later · <= 0.8.10 · CVE-2026-45666 · GHSA-x3qm-p8hr-3c3h · amended
14 May 2026Evidence →
High, CVSS 8.114 May 2026
Open WebUI has Stored XSS in Banner Component via Improper Sanitization Order
npm open-webui · Upgrade to 0.8.0 or later · <= 0.7.2 · CVE-2026-45665 · GHSA-cqp4-qqvg-3787 · amended
14 May 2026Evidence →
High, CVSS 8.114 May 2026
Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach Endpoints
PyPI open-webui · Upgrade to 0.9.5 or later · <= 0.9.4 · CVE-2026-45402 · GHSA-r472-mw7m-967f · amended
14 May 2026Evidence →
High, CVSS 7.314 May 2026
Open WebUI vulnerable to stored XSS via OAuth picture claim stored as SVG data URI in profile_image_url
PyPI open-webui · Upgrade to 0.9.5 or later · <= 0.9.4 · CVE-2026-56398 · GHSA-3wgj-c2hg-vm6q · amended
14 May 2026Evidence →
High, CVSS 8.514 May 2026
Open WebUI has a SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints (not addressed by CVE-2025-65958)
PyPI open-webui · Upgrade to 0.9.5 or later · <= 0.9.4 · CVE-2026-45401 · GHSA-rh5x-h6pp-cjj6 · amended
14 May 2026Evidence →
High, CVSS 8.514 May 2026
Open WebUI has a Server-Side Request Forgery (SSRF) bypass in validate_url
PyPI open-webui · Upgrade to 0.9.5 or later · <= 0.9.4 · CVE-2026-45400 · GHSA-8w7q-q5jp-jvgx · amended
14 May 2026Evidence →
High, CVSS 7.114 May 2026
Open WebUI: Low-privilege authenticated users can enumerate and stop global background tasks, causing system-wide chat disruption
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-45399 · GHSA-8jjp-r2w2-4v22 · amended
14 May 2026Evidence →
High, CVSS 7.514 May 2026
Open WebUI Vulnerable to IDOR: Retrieval API Bypasses Knowledge Base Access Controls
PyPI open-webui · Upgrade to 0.9.5 or later · <= 0.9.4 · CVE-2026-45398 · GHSA-4g37-7p2c-38r9 · amended
14 May 2026Evidence →
Medium, CVSS 5.314 May 2026
Open WebUI Vulnerable to Unauthenticated RAG Configuration Disclosure
PyPI open-webui · Upgrade to 0.9.5 or later · < 0.9.5 · CVE-2026-45397 · GHSA-65pg-qhhw-mxwg · amended
14 May 2026Evidence →
Medium, CVSS 5.414 May 2026
Open WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data Manipulation
PyPI open-webui · Upgrade to 0.9.5 or later · < 0.9.5 · CVE-2026-45396 · GHSA-rjmp-vjf2-qf4g · amended
14 May 2026Evidence →
High, CVSS 7.214 May 2026
Open WebUI: Missing workspace.tools Authorization Check on Tool Update Endpoint Allows Privilege Escalation to Code Execution
npm open-webui · Upgrade to 0.9.5 or later · < 0.9.5 · CVE-2026-45395 · GHSA-p4fx-23fq-jfg6 · amended
14 May 2026Evidence →
Medium, CVSS 4.314 May 2026
Open WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt leakage)
PyPI open-webui · Upgrade to 0.9.5 or later · <= 0.9.4 · CVE-2026-45387 · GHSA-h2cw-7qw9-56xr · amended
14 May 2026Evidence →
Medium, CVSS 4.314 May 2026
Open WebUI has an IDOR vulnerability in the pin_channel_message API endpoint
PyPI open-webui · Upgrade to 0.9.5 or later · <= 0.9.4 · CVE-2026-45386 · GHSA-5gc6-xhv4-2wg6 · amended
14 May 2026Evidence →
Medium, CVSS 4.314 May 2026
Open WebUI has an IDOR vulnerability in the update_message_by_id API endpoint
PyPI open-webui · Upgrade to 0.9.5 or later · < 0.9.5 · CVE-2026-45385 · GHSA-wwhq-cx22-f7vv · amended
14 May 2026Evidence →
Medium, CVSS 5.414 May 2026
Open WebUI: Authenticated users can bypass model access control via exposed query parameter [AI-ASSISTED]
PyPI open-webui · Upgrade to 0.8.11 or later · <= 0.8.10 · CVE-2026-45365 · GHSA-v6qf-75pr-p96m · amended
14 May 2026Evidence →
Medium, CVSS 6.514 May 2026
Open WebUI Exposes System Prompt to Regular User [Non-Admin]
PyPI open-webui · Upgrade to 0.8.9 or later · <= 0.8.8 · CVE-2026-45351 · GHSA-jh9g-8jqw-m2qx · amended
14 May 2026Evidence →
High, CVSS 7.114 May 2026
Open WebUI's chat completion API allows tool restrictions to be bypassed
PyPI open-webui · Upgrade to 0.8.6 or later · <= 0.8.5 · CVE-2026-45350 · GHSA-4pcg-253r-rf9w · amended
14 May 2026Evidence →
High, CVSS 7.114 May 2026
Open WebUI has Broken Access Control for Completions API
PyPI open-webui · Upgrade to 0.9.0 or later · <= 0.8.12 · CVE-2026-45349 · GHSA-gfm2-xm6c-37qc · amended
14 May 2026Evidence →
High, CVSS 7.514 May 2026
Svelte devalue: DoS via sparse array deserialization
npm devalue · Upgrade to 5.8.1 or later · >= 5.6.3, <= 5.8.0 · CVE-2026-42570 · GHSA-77vg-94rm-hx3p · amended
14 May 2026Evidence →
Medium, CVSS 4.314 May 2026
Open WebUI vulnerable to blind server side request forgery (SSRF) via the PDF generate function
PyPI open-webui · Upgrade to 0.5.11 or later · < 0.5.11 · CVE-2026-45347 · GHSA-f776-fp4w-266c · amended
14 May 2026Evidence →
Medium, CVSS 5.114 May 2026
Open WebUI Has Stored Cross-Site Scripting in SVG Renderer
npm open-webui · Upgrade to 0.6.31 or later · < 0.6.31 · CVE-2026-45346 · GHSA-r29h-37fj-x2w6 · amended
14 May 2026Evidence →
Medium, CVSS 6.514 May 2026
Open WebUI missing authorization check at the model update function - models from other users can be updated
PyPI open-webui · Upgrade to 0.5.7 or later · <= 0.5.6 · CVE-2026-45345 · GHSA-gm54-m39w-grjp · amended
14 May 2026Evidence →

A vendor fix does not resolve your finding until you verify it in your own systems.

News

Security reports that are not matched to your stack.

CISA security events · all vendors

NewsExploited · CISA KEV10 Nov 2026
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Google Chromium Use-After-Free Vulnerability
NewsExploited · CISA KEV10 Nov 2026
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Advisory watch · no fix evidence

NewsUnratednpm13 Nov 2026
Malicious code in stylelint-standard (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm13 Nov 2026
Malicious code in em-owa-walletconnect-sign-client (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm13 Nov 2026
Malicious code in jsconvict (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm13 Nov 2026
Malicious code in internallib_v811 (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
NewsUnratednpm13 Nov 2026
Malicious code in internallib_v647 (npm)
Listed as news: the source report lacks affected versions, a fix, or verified evidence.

Browse all news

Know what to patch next.

Actionable

Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed

Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion

Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)

Open WebUI has an Indirect Object Reference (IDOR) in user notes

Open WebUI has Stored XSS in Banner Component via Improper Sanitization Order

Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach Endpoints

Open WebUI vulnerable to stored XSS via OAuth picture claim stored as SVG data URI in profile_image_url

Open WebUI has a SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints (not addressed by CVE-2025-65958)

Open WebUI has a Server-Side Request Forgery (SSRF) bypass in `validate_url`

Open WebUI: Low-privilege authenticated users can enumerate and stop global background tasks, causing system-wide chat disruption

Open WebUI Vulnerable to IDOR: Retrieval API Bypasses Knowledge Base Access Controls

Open WebUI Vulnerable to Unauthenticated RAG Configuration Disclosure

Open WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data Manipulation

Open WebUI: Missing `workspace.tools` Authorization Check on Tool Update Endpoint Allows Privilege Escalation to Code Execution

Open WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt leakage)

Open WebUI has an IDOR vulnerability in the pin_channel_message API endpoint

Open WebUI has an IDOR vulnerability in the update_message_by_id API endpoint

Open WebUI: Authenticated users can bypass model access control via exposed query parameter [AI-ASSISTED]

Open WebUI Exposes System Prompt to Regular User [Non-Admin]

Open WebUI's chat completion API allows tool restrictions to be bypassed

Open WebUI has Broken Access Control for Completions API

Svelte devalue: DoS via sparse array deserialization

Open WebUI vulnerable to blind server side request forgery (SSRF) via the PDF generate function

Open WebUI Has Stored Cross-Site Scripting in SVG Renderer

Open WebUI missing authorization check at the model update function - models from other users can be updated

News

CISA security events · all vendors

Advisory watch · no fix evidence

Know what to patch next.

At a glance

Activity · last 26 weeks

Actionable

News

CISA security events · all vendors

Advisory watch · no fix evidence