CVE Explorer
CVE-2026-59220
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.2 before 0.10.0, the SKILL_MENTION_RE and strip_re regular expressions in backend/open_webui/utils/middleware.py parsed <$skillId|label> skill mentions with overlapping quantifiers, allowing an authenticated chat message containing <$ without a closing > to trigger quadratic backtracking and block the asyncio event loop. This issue is fixed in version 0.10.0.
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"product":"open-webui","vendor":"open-webui","versions":[{"status":"affected","version":">= 0.9.2, < 0.10.0"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:4a22aa4556e4ddd6a87093f46d3367ce18ae587823ae1c7254cce44d1ec9549a · sha256:3f62cc63c65f1a3b… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:4a22aa4556e4ddd6a87093f46d3367ce18ae587823ae1c7254cce44d1ec9549a · sha256:3f62cc63c65f1a3b… · /containers/cna/metrics/0/cvssV3_1
CWE assertions
1 source assertion{"cweId":"CWE-1333","description":"CWE-1333: Inefficient Regular Expression Complexity","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:4a22aa4556e4ddd6a87093f46d3367ce18ae587823ae1c7254cce44d1ec9549a · sha256:3f62cc63c65f1a3b… · /containers/cna/problemTypes/0/descriptions/0
Source references
4 source assertions{"name":"https://github.com/open-webui/open-webui/commit/61a26722155ec6ee1b629cf8dfcf975098c18331","tags":["x_refsource_MISC"],"url":"https://github.com/open-webui/open-webui/commit/61a26722155ec6ee1b629cf8dfcf975098c18331"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:4a22aa4556e4ddd6a87093f46d3367ce18ae587823ae1c7254cce44d1ec9549a · sha256:3f62cc63c65f1a3b… · /containers/cna/references/1
{"name":"https://github.com/open-webui/open-webui/releases/tag/v0.10.0","tags":["x_refsource_MISC"],"url":"https://github.com/open-webui/open-webui/releases/tag/v0.10.0"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:4a22aa4556e4ddd6a87093f46d3367ce18ae587823ae1c7254cce44d1ec9549a · sha256:3f62cc63c65f1a3b… · /containers/cna/references/2
{"tags":["exploit"],"url":"https://github.com/open-webui/open-webui/security/advisories/GHSA-ffpj-xv5c-p3gw"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:4a22aa4556e4ddd6a87093f46d3367ce18ae587823ae1c7254cce44d1ec9549a · sha256:3f62cc63c65f1a3b… · /containers/adp/0/references/0
{"name":"https://github.com/open-webui/open-webui/security/advisories/GHSA-ffpj-xv5c-p3gw","tags":["x_refsource_CONFIRM"],"url":"https://github.com/open-webui/open-webui/security/advisories/GHSA-ffpj-xv5c-p3gw"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:4a22aa4556e4ddd6a87093f46d3367ce18ae587823ae1c7254cce44d1ec9549a · sha256:3f62cc63c65f1a3b… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.