Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-109297— Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence Rules

Quick assessment

Affected
open-webui open-webui
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Open WebUI 0.11.0 至 0.11.4 版本中存在一个拒绝服务（DoS）漏洞，该漏洞出现在自动化循环规则（recurrence-rule）验证器中。其子日频率（sub-daily frequency）校验器在解析规则文本时，比实际执行该规则的日历库更加严格。 被允许创建自动化的用户可提交经过空白字符折叠的规则（或在 0.11.0 版本中提交小写形式的频率值，或省略 RRULE 前缀），这些规则会导致每秒同步展开大量事件。这使得共享事件循环（event loop）被阻塞，每次请求以及每次调度器轮询（sc

CVSS 6.5 · Medium

Possible ATT&CK Techniques 1 AI

T1499.002 · Service Exhaustion Flood
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-109297

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence Rules
Source: CVE Program / CVE List V5
Vulnerability Description
Open WebUI 0.11.0 before 0.11.4 contains a denial of service vulnerability in the automation recurrence-rule validator, whose sub-daily frequency guard parses rule text more strictly than the calendar library that executes it. Users permitted to create automations can submit whitespace-folded rules (or, in 0.11.0, lowercase frequencies or omitted RRULE prefixes) that expand per-second synchronously, blocking the shared event loop for minutes per request and on every scheduler poll.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
open-webui open-webui 0.11.0 ~ 0.11.4 -

II. Public POCs for CVE-2026-109297

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-109297

请登录查看更多情报信息。

Other References for CVE-2026-109297 (2)

Same Patch Batch · open-webui · 2026-10-12 · 18 CVEs total

CVE-2026-109286 8.1 HIGH Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModal
CVE-2026-109291 7.3 HIGH Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citation embed_url
CVE-2026-109290 7.3 HIGH Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview
CVE-2026-109292 6.8 MEDIUM Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections
CVE-2026-109299 6.5 MEDIUM Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validation
CVE-2026-109294 6.5 MEDIUM Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Image
CVE-2026-109293 6.5 MEDIUM Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint
CVE-2026-109298 6.5 MEDIUM Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regex
CVE-2026-109295 6.5 MEDIUM Open WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowledge_files Event Loop
CVE-2026-109288 6.4 MEDIUM Open WebUI before 0.11.4 Stored XSS via javascript: URLs in Markdown Links
CVE-2026-109289 6.3 MEDIUM Open WebUI 0.8.8 before 0.11.4 Improper Session Revocation via Terminal WebSocket
CVE-2026-109283 5.4 MEDIUM Open WebUI 0.11.1 before 0.11.4 Authorization Bypass via OAuth Token Exchange
CVE-2026-109285 5.0 MEDIUM Open WebUI 0.6.0 before 0.11.4 Improper Access Control via Stale File Metadata
CVE-2026-109300 4.6 MEDIUM Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call Embeds
CVE-2026-109284 4.3 MEDIUM Open WebUI 0.11.0 before 0.11.4 Improper Authorization via Chat Fork Endpoint
CVE-2026-109296 4.3 MEDIUM Open WebUI before 0.11.4 Missing Authorization via Backend Index on Model Routes
CVE-2026-109287 4.3 MEDIUM Open WebUI 0.9.6 before 0.11.4 Information Disclosure via Unscoped Directory ID

IV. Related Vulnerabilities

Same product: open-webui
Same vendor: open-webui
Same weakness: CWE-400

V. Comments for CVE-2026-109297

No comments yet

Leave a comment